I would say
1) Avoid the free VPNs , I dont trust them
2) The paid VPNs - we don't know if they are even 100% safe but many people use them anyway
3) Always use 2FA on your accounts