> I use Mullvad because it physically prevents anyone from logging my data.
> They're known to run everything in RAM, nothing gets stored. You pull the plug and everything is gone.
> Of course, you have to trust the company on that.
So nothing actually physically prevents them from logging your data, and this entire series of statements from you mean nothing because it still boils down to "you have to trust the company". A statement which is true for every VPN provider.
The trust in Mullvad was put to a test two years ago when Swedish police raided their headquarters with a warrant to seize customer data. They left with absolutely nothing because the data didn't exist to be seized.
Furthermore, Mullvad doesn't even keep an email address or a credit card on file. You sign up with a random number and can pay with cash in an envelope. If a company doesn't know who you are, uses only RAM servers, open-sources their code, and successfully clears a police raid, it's no longer just a matter of blind trust