Sources:

1. https://blog.malwarebytes.com/detections/pup-optional-crossr...

2. https://en.globes.co.il/en/article-sagis-criminal-past-may-h...

4. https://cointelegraph.com/news/former-mt-gox-ceo-mark-karpel...

5. https://www.reddit.com/r/sevengali/comments/9dgexs/why_to_av...

6. https://vpnpro.com/blog/confusion-in-the-vpn-industry-is-nor...

7, 8. https://linustechtips.com/main/topic/1088904-private-interne..., https://snew.notabug.io/r/PrivateInternetAccess/comments/ckb...

9. https://www.techradar.com/news/cyberghost-owner-buys-pia-for...

I agree, seems like it's always like this. Shady measures are taken up or new laws approved just for a bit, for that situation, and then they stay forever