Well, this is a transcendent level of evil: Facebook bought a VPN company and deployed it, in part, to spy on its users.
https://techcrunch.com/2024/03/26/facebook-secret-project-snooped-snapchat-user-traffic/
It's a reminder that VPNs have their own risks, beyond technical ones if operated incompetently -- namely, that you have to trust the VPN company itself.