Which oddly enough, circle back to a comment chain between a PIA and a Protonvpn employee, here on HN. It's far fetched but it seems like there is some corroborating evidence.
Even though, to me, it seems like a LOT of trouble since tons of services have managed to roll out a VPN product without resorting to white labelling Nordvpn