I agree there's a very high chance they and the majority of other VPNs are - or if not the US some other intel org.

The US government has form (what was that early crypto machine they sold to allies and it was backdoored?), and they'd be foolish to miss such a strategically obvious play.