Fuck you, pay me for those of you uninitiated, this talk by Mike Monteiro is awesome - about not getting paid in creative services: https://www.youtube.com/watch?v=jVkLVRt6c1U
That's really fair, and I think you have a good point. Perhaps operating in a publicly visible place - think floor-to-ceiling windows at that particular server rack.
Oeck claims no-logs and details how they've achieved that (they don't even have hard drives). Support is responsive, you'll be responded to by those who actually built the platform. They're planning support for WireGuard.
Unfortunately they have admins in Australia which has some pretty hefty laws similar to those in the US (look at gag-orders issued, and recent responses to media outlets for publishing vetted and leaked data). You can find their intro post in Whirlpool forums.
They configure a PXE and have a system in place for distributing the OS in each region (and thus each data center).
For debugging issues they try to replicate things on a local environment and my assumption is if there's any networking issues, they likely have a node on the same data center they can remote to, to test connectivity issues - however functional issues require replication locally. No SSH access to the box.
So I think for now, Oeck or Mullvad are good choices. I only wish these services did 1 thing differently - and that is, release a live video stream of their server farm's rack and video-document the entire process of compiling and shipping their hardware, as well as the systems in place for loading the OS to ensure no exfiltration data from malicious services or agents on the box.
This could be done relatively cheaply - I'm surprised none of the VPN providers have yet. A fish-eye lens attached to a webcam on a rack would be cheap to install. It's the closest thing we have to proof a VPN server hasn't been owned without a zero-day. If you're using up-to-date services, a LEO, government or APT using a zero-day to own your server is really the only means of exfiltrating user data in this environment.
This. It'll take 2 years before they get industry software on compatible hardware - this is the last industry upgrade prior to the switch.
The next 2-3 years will make or break the professional MacOS market. My money's on make, and I think they're going to absolutely knock it out of the park.