If you're using a third-party VPN service as the single way in which you are protecting your privacy, you're already in such a sorry state that it doesn't matte

If you're using a third-party VPN service as the single way in which you are protecting your privacy, you're already in such a sorry state that it doesn't matter whether or not your VPN provider is compromised. If your threat model is such that you're concerned about TLAs or state-level actors targeting you, you're already in a world of hurt. If you are under the mistaken belief that the VPN provider is anywhere near as conscious of your security as you are, you're already living a bit of a fantasy. So the answer to your question is that it's not really possible to think that they're ultra-secure, but that ultra-security was never what they were selling.