Thanks I didn't see this before. In the infrastructure what exactly did they audit? It seems 4 servers? Is that correct? I'm not sure I understand how these companies set up their networks, but every exit point would correspond to a server wouldn't it?

I should probably clarify that I didn't really mean that Mozilla (or mullvad) is unsecure, simply that reports like this don't really tell us a lot, because the infrastructure is quite significant and it might be changing continuously. On the other hand I don't think there's anything better.