The author makes good points but forgets to key considerations: 1) Reputation. A well known,well reputed provider (Fsecure or protonvpn for example) for most u

The author makes good points but forgets to key considerations: 1) Reputation. A well known,well reputed provider (Fsecure or protonvpn for example) for most users would not be less trustworthy than their ISP. ISPs can easily get away with injecting malware into your http traffic or selling your data. A security company or VPN provider based in a jurisdiction with strict privacy laws and with well known business owners however has a lot more to lose and a lot less legal fighting power. 2) Threat model - you are already trusting someone (ISP) with not only monitoring your traffic but manipulating it. That should already be part of your threat model.when comparing a vpn provider with your ISP, which potential attacker poses a greater risk? For many users,sadly,it is their ISP. Last note,most vpn users just want to bypass IP restrictions,they don't care all that much about privacy(although that seems to be changing)