In the VPN world, it’s easy to assume you’re dealing with independent, privacy-focused companies, but the reality can be quite different.