That is a risk they take. That's what I was saying about transparency. If the Hola website made had made the whole situation more obvious, then users either take this risk or pay the $X a month for an actual VPN service.