Don't Use VPN Servces
gist.github.com
gist.github.com
Which is the lesser evil in this case? Use a "reputable" VPN that has a financial interest in not goofing you privacy-wise or else their business grumbles, or do ID verification and therefore de-anonymize yourself just to view content your state gates?
And yeah, VPN's can see all layer 4 and any unencrypted layer 7. Even if they claim no logs that could be a word game. They can have an API that permits real time monitoring. No VPN provider would last long without it. See Lavabit [2] There will always be people in denial and evoking coping mechanisms regarding this.
[1] - https://www.tinc-vpn.org/
[2] - https://www.theguardian.com/world/2013/oct/03/lavabit-ladar-...
A VPN itself is otherwise a useful tool for combining remote networks to act like a single network, and is often hosted by businesses or even individuals to access internal resources, like shared network drives and intranet pages, or even printers, though the latter is usually on accident.