Mullvad can unilaterally correlate ingress and egress traffic for their users – this is not to say that they do, but they have the capabilities of doing so.

If implemented correctly (and that's a big if!), a nested tunnel approach can make that much harder and require global passive or active traffic observation capabilities (for timing observation, possibly with active timing modifications, of specific flows), or collusion of at least two different entities.