imho any in the limited sparrow list of public servers is fine (vpn preferred). still a risk, but not like things were with electrum for desktop whose server list had a scattering of chain analysis honeypots.