Empirically, PIA has no logs to give (per multiple warrants now).

no, though that may constitute fraud depending on the jurisdiction. this is why some VPNs are based in certain countries, such as ProtonVPN in Switzerland. obviously they have to comply with a valid legal request, but depending on the data retention laws in the jurisdiction, there may be nothing to give over.

some VPNs definitely lie about logging, maybe most of them. ProtonVPN is one of the least likely ones to do so given their transparency relative to other VPN companies, their ProtonMail service, their infrastructure, and their founder.

upstream logging is still possible, and protonvpn is the only VPN service I know of with any of its own infrastructure. it has one datacenter in switzerland and you can use it as a proxy to some of its third party operated endpoints in other countries.