My trust in them was definitely shaken after the recent news about fingerprinting exit IPs: https://tmctmt.com/posts/mullvad-exit-ips-as-a-fingerprinting-vector/
They were very responsive but this seemed like a huge fuck-up to me, to the extent that I question whether it was purposeful.
Not sure who else to trust because other providers like Proton seem even worse