They have port forwarding, but they were bought by a company that has been caught stuffing malware into purchased programs. Basically, it was a company that has a history of buying out otherwise legitimate software brands, and then bulking them with adware as a quick cash grab on the existing customers.

That buyout was like 4 or 5 years ago, but it left a sour taste in many people’s mouths. Because everyone expected the PIA client to silently get bulked with adware one day. Since trust is basically the only reason to casually use a VPN, it pushed a lot of their users to alternatives.