You can always setup Algo on your own personal VPS running on Azure, GCE, DigitalOcean, Vultr, etc.

https://github.com/trailofbits/algo

Also, hasn't CloudFlare been audited to verify their no log claims? I know while Mullvad hasn't been audited to verify their no log claims, they have at least been audited to verify the security of their app.

https://blog.cloudflare.com/1111-warp-better-vpn/

"1. We don't write user-identifiable log data to disk;

2. We will never sell your browsing data or use it in any way to target you with advertising data;

3. Don’t need to provide any personal information — not your name, phone number, or email address — in order to use the 1.1.1.1 App with Warp; and

4. We will regularly hire outside auditors to ensure we're living up to these promises."

https://mullvad.net/en/blog/2018/9/24/read-results-security-...

> they have more incentive to lie than your ISP does

A lot of ISPs openly collect user data, so I don't know how much that factor matters. And while I can go get a VPN, I can't just get another ISP.

Pretty much a textbook "Lemon Market"

https://en.wikipedia.org/wiki/The_Market_for_Lemons

Shouldn't matter to your average torrent user or someone who wants to watch US YouTube. And I guess that's most people who actually use it.

Plenty of people using VPN for: pirating, get an IP from a foreign country to bypass some content limitation etc., so they still need one, secure or not.