I think their stuff is open source, and security experts are linking the IP:s used with mullvad with TOR activity.