There are no existing mainstream VPN providers who have strong technical controls to protect user privacy OR anonymity.
There's Tor, and some other systems like that, which make a stronger technical case for anonymity.
There's still a place for VPNs, but it's not as an anonymity service.
On the other hand, I'd want all services to have high security built in -- your mainstream mail provider, mainstream note-taking service, etc. Some of that is technical (a "hostproof" architecture if possible, good internal audit on administrative interfaces, personnel security, etc.). But then, you're one of a mainstream company's customers, vs. a subscriber of the "illegal activity hiding service".
There are "mainstream" uses of VPNs (business, local-privacy, desire to defeat geolocation, firewall-busting, etc.), for which they're great. There are some purposes (anonymity) for which they're horrible. There are things like file sharing in contravention of your ISP's policies or national law where they may work but might not be the best solution -- I'd really go with a seedbox instead of running peer to peer traffic over a VPN.