[0daystock]

> Is it an absolute that Mullvad doesn't log/sell information? No, of course not. But they make a much more convincing case than my ISP does.

That's not the only deciding factor though, is it? Mullvad (not singling them out, but just for sake of illustration) is in many ways is more attractive to bad actors because it centralizes users seeking privacy. On top of that, you're adding additional software and network complexity which equals attack surface. There's more to consider than what appears at face value when considering whether a VPN is appropriate.

[ziddoap]

Of course there is more to it than a single dimension, I just didn't think it necessary to write out each and every consideration as the risk analysis will change per user.

The trade-off is worth it, for me personally, including when those other factors are considered.