How many of those 'privacy' VPNs ever conduct proper security analysis of their servers for modern malware, for ex. conducting memory forensics?
Most have servers in data centers in 10+ different countries, so I doubt they are all closely monitored nor capable of keeping their keys closely guarded.
Most VPNs like to advertise the 'military grade encryption' or 'no logs' nonsense, I'd rather see them post results of security audits, ideally conducted by outside firms.
VPN are a scam business run by offshore companies in budget datacenters with the cheapest possible employees.
It probably doesn't matter because 99.999% only want to access Netflix in another country. Out of the remaining 0.001%, most are just people from repressive countries dodging their country's porn filters.