[wg0]

That's very simplistic assumption. If the German state machinery is determined to get you, ISP and VPN provider have a threshold beyond which they'll give up.

Many many examples out there. "We don't keep logs" is not good enough neither realistic because how else a VPN provider is supposed to protect itself if it doesn't keep a log of what's happening inside and through its own systems.

[majorchord]

Protect itself from what? They're not responsible for what their users do online.

[ignoramous]

That's a misconception. They are indeed responsible if they don't comply with laws that require them to log (to collect evidence, as one example: https://www.bakermckenzie.com/en/insight/publications/2026/0...).