Using a VPN service from a non-US friendly jurisdiction doesn't guarantee the CIA isn't operating the service, hasn't compromised the service (via human or technical), or doesn't have taps to monitor the service in/out flows giving them the metadata needed to retrace your connection back through the platform.