AFAICT, the only discriminating factor is lack of solicited third-party security audits. Which I don't think implies being "untrustworthy".
https://www.privacyguides.org/en/vpn/#marketing
https://discuss.privacyguides.net/t/why-is-vpn-providers-lik...
(PIA/Kape I get and relevant information is easily discoverable available on controversy surrounding them and their owners)