Lots of security flaws in code recently. FB and Google+ both leaked, Instagram had a minor leak a week or so ago. It's hard to put blame, I've coded just a bit in my life but I get it how hard it is to write a truly secure and efficient code. Well, on the bright side users can protect themselves against MITM attacks by using a VPN. I'm using Surfshark right now, have tried Zenmate, PIA before, but had some minor issues and wanted to change provider. Surfshark looks pretty secure, they have been audited recently by Cure53 and the outcome was positive. Decided to buy it after that, they offered "BLACKSHARK" coupon which gave a nice discount, maybe it still works. Some providers tend to keep Black Friday discounts a bit longer.