It's hard to lend any more credibility to Troy Hunt's blog post than your typical YouTube shill. The eyes are still rolling. I understand Troy's reasoning is sound, but NordVPN is _still_ the same entity who markets widely on social media platforms, mainly using strategies that include spreading FUD.
Yes it's technically safer, no you probably don't need one, yes the advertising is largely misleading/fearmongering, and yes these VPN providers would love if it became common "knowledge" that all Internet users should pay a VPN-tax on top of their ISP bill to stay safe online.