And yeah, VPN's can see all layer 4 and any unencrypted layer 7. Even if they claim no logs that could be a word game. They can have an API that permits real time monitoring. No VPN provider would last long without it. See Lavabit [2] There will always be people in denial and evoking coping mechanisms regarding this.

[1] - https://www.tinc-vpn.org/

[2] - https://www.theguardian.com/world/2013/oct/03/lavabit-ladar-...