The trust in Mullvad was put to a test two years ago when Swedish police raided their headquarters with a warrant to seize customer data. They left with absolutely nothing because the data didn't exist to be seized.

Furthermore, Mullvad doesn't even keep an email address or a credit card on file. You sign up with a random number and can pay with cash in an envelope. If a company doesn't know who you are, uses only RAM servers, open-sources their code, and successfully clears a police raid, it's no longer just a matter of blind trust