How many of those 'privacy' VPNs ever conduct proper security analysis of their servers for modern malware, for ex. conducting memory forensics?

Most have servers in data centers in 10+ different countries, so I doubt they are all closely monitored nor capable of keeping their keys closely guarded.

Most VPNs like to advertise the 'military grade encryption' or 'no logs' nonsense, I'd rather see them post results of security audits, ideally conducted by outside firms.