mullvad's mistake was to respond. it's all universally performative, the only reason it elicits reactions (1000+ comments here) when the view of a megacorp don't is because people anticipate the ability to elicit a response from a smaller company like mullvad.
rule number one: ignore any and all political controversies, don't respond in any way. deviation is nearly always punished. unless it's part of some PR campaign with a side-risk of backfire.