It’s what I have used for ~2 years and it’s fast. I can’t speak to the business ethics and how well they hold up against regulatory pressure but on the surface, it looks good enough to me.

I mostly just use it for encrypting my traffic on public networks. Not as a means of privacy from governments