I might start sounding like a shill, but Mullvad has a great track record so far. They’ve been raided by police and they’ve walked away with nothing. They also fairly recently migrated fully to a diskless RAM only infrastructure also.

The previous poster kind of hinted on this, but Mullvad removed port forwarding from their services, so keep that in mind.

Also for payment, Mullvad will accept cash over mail so you can’t be traced digitally by payment.