They’re also not based in a Nordic country, which I find misleading.
Ironically, Lithuania is a part of Northern Europe, but because of the data retention laws they have to pretend that they are based somewhere else[1].
[1] https://vpnscam.com/wp-content/uploads/2018/08/2018-08-24-09...
You can't really blame NordVPN for that (I mean, the Netherlands aren't even a Nordic country, my brain is just broken), but it's a data point.