If you VPN service, only provide VPN, then a (free tier) AWS server in a foreign country + wireguard would do the same. Sure, AWS could log the outbound traffic for that account, but AWS only has an email address from me, not a credit card like a VPN service. Feels like the exposure is far less.