You're overreacting. While PIA (and really, no VPN provider) should be trusted, John K. here is John Koh (and he sucks at upgrading packages on his 'secure' Ubuntu laptop).