A problem there is that many VPNs sell our data as well. Even if they say they don't sell it, we have no way of proving they don't.
Could AWS, Digital Ocean, Linode, <insert other low end hosts> all be trying to? Sure, I guess? Is it really central to their business model? I think that is a bit of a stretch so I'm comfortable trusting my tunneled traffic to them.