A lot of "free" VPN apps do the same thing and I haven't heard of any of them getting in legal trouble. It's kinda like running a tor exit node except most buyers just wanna borrow the user's IP to scrape sites that are otherwise impractical to scape with just a captcha solver due to aggressive blocking of non-residential ISPs and heavy rate limiting.