Steve Gibson specifically recommends TunnelBear because they submitted themselves to a public security audit.
https://www.tunnelbear.com/blog/tunnelbear_public_security_a...
Other than TunnelBear, ProtonVPN is run by the ProtonMail folks and is based out of Switzerland, so they would respond to any foreign subpoena with a polite "fuck off."