https://forum.openwrt.org/t/best-newcomer-routers-2024/189050/2 this comes right from their forum and is a good list

Just sharing this write up about vulnerabilities in their client: https://gergelykalman.com/why-you-shouldnt-use-a-commercial-vpn-amateur-hour-with-windscribe.html
…because why would you go to all the trouble to pay Mullvad (presumably to keep your sensitive information away from big tech) to then give it to google in the form of an e-mail should you reach out to Mullvad for support? Google would then suck up any and all data that comes via their gmail service.
https://mastodon.world/@Mer__edith/111563865413484025 this is the response from the president of the Signal Foundation to the question around push notifications and if google/apple can access your messages via this method.