On the other hand, the lack of common decency can endanger innocent 3rd parties.
Time and time again private companies have rug pulled things like api access for 3rd party apps (such as twitter/X). Building 3rd party clients for private systems should already be approached with heavy scepticism and always be prepared for the worst.
Notify, then publish
This is the best VPN regarding security and privacy there is.
I did my research