PIA meets 100% of the criteria outlined in that post however with no discussion of how to determine or measure additional criteria like future possible bad behavior based on corporate ownership, which was the genesis of the whole thread.

Ostensibly the "paid" portion of the criteria is a proxy for incentive to not do shady things like show ads or distribute malware.