Mullvad had a good blog post regarding this
AirVPN also had some good info in their response to a forum query about it
Seems like, even if a malicious actor does setup an evil DHCP server on your network, as long as your using the network lock features of the recommended VPNs you should be pretty well protected from this as the firewall rules would make it much harder for this to work, assuming no split tunneling.