Just sharing this write up about vulnerabilities in their client: https://gergelykalman.com/why-you-shouldnt-use-a-commercial-vpn-amateur-hour-with-windscribe.html
…because why would you go to all the trouble to pay Mullvad (presumably to keep your sensitive information away from big tech) to then give it to google in the form of an e-mail should you reach out to Mullvad for support? Google would then suck up any and all data that comes via their gmail service.
https://forum.openwrt.org/t/best-newcomer-routers-2024/189050/2 this comes right from their forum and is a good list