But what is also great about Mullvad is that they're actively working to make their remote and local security better. They're involved in the stboot[1] project for example.

1. https://mullvad.net/en/blog/2022/1/12/diskless-infrastructur...

Perhaps a Swede can chime in, but I'd imagine Sweden has a lax regulatory approach, e.g. compare the fates of PRQ and Megaupload. It's, admittedly inexplicably, concerning that we've driven people to foreign companies (from American ones) due to government surveillance. It begs the question: under what conditions would a consumer be fine ceding privacy? Transparency? Remuneration?