In the past I found a relatively sane comparison site for most of these vectors on reddit (that I can now ... not find due to an OS reinstall literally yesterday).
Ended up going with iVPN for reasons that are currently unknown.
Now if the VPN provider goes on record as saying they don't do any of these shady things, at least you'll have some grounds to go after them legally if they actually do them. I suspect this is why the questionnaire also has a bit about ownership.
https://thatoneprivacysite.net/vpn-section/
Hope that helps!
Every "VPN review" website just seems shady as all hell.
I'm not going to roll my own. I'm using it for basic security and obfuscation; I'm not a high-risk target. Therefore, a recommendation for a service is still required.
Using commercial VPN services, all you do is shift your Internet gateway from your ISP to your VPN service provider; it's not clear which one is better. They also are honeypots: All someone needs to do is compromise the VPN provider and they have everyone's confidential data. Many VPN providers (almost all of whom, I'd guess) have poor security practices - security is expensive; consider how much security your monthly fee buys. It's just a juicy, high-ROI target.
The creator of Algo, an automated roll-your-own VPN, knows much more more than I do; this is worth reading IMHO:
https://blog.trailofbits.com/2016/12/12/meet-algo-the-vpn-th...
All that said, I think you do have a point. I'd try Tor, though.