The biggest honeypots are the paid VPNs....
They have your payment information, identity, and everything all linked to that VPN config.
Don't be fooled by the standard cliche around free VPNs. Some free VPNs are bad, but to say that because a VPN is paid it is legit is just wrong.