Major VPN providers are actively engaged in tracking
medium.com
medium.com
If that's the case, then this doesn't seem to be a huge issue and I found the title of the submission to be somewhat misleading in this regard - my first thought was that these VPN providers were tracking/logging the traffic that passed through their servers as part of their service.
I also don't see a huge issue with the fact that some VPN providers give users a choice of different protocols which vary in security. This choice may be of use to users who are concerned about compatibility and perhaps are unable to use OpenVPN. When you connect to Google using TLS, there are many ciphers that are supported - some more secure than others.