Agree about wireguard, works much better for me as a routing node. if you want to better hide your VPN activity from malicious actors that target it - don't use any custom VPN services, but rather run wireguard on a general purpose VPS with port forwarding.