What I do like about them is they were honest about the scope and took steps to make sure it could never happen again. All of their servers now operate in RAM, which is about the best you can hope for with a public VPN provider. They do seem to have a strong understanding of PKI, and use short lived certificates.
They also have other informative articles rather than just “marketing SEO fluff” like a lot of VPN companies do.
We still would be waiting for that audit likely they were fixing and refactoring code to be publicly available.
It’s Tom Sparks, of course he’s going to be a sensationalist twit. His whole take on the PTIO/PG transition was to support Marco Wollank’s (BurungHantu) lies without any research/comment from the other side (us) and then to make some crappy “hit piece” for his channel. When challenged on Twitter there was silence. Apparently that stemmed from a post on Reddit where I suggested he had a strange obsession with Tor Guard and his “reviews” weren’t very scientific, only speed tests and no real evaluation of apps, their kill switches, (whether the implementation is safe) or other features such as IPv6 routing, port forwarding etc, if they are open source, or if they’ve had audits. I don’t know whether that has improved, as I don’t watch his videos and am not his target audience.
I have found that Windscribe has been professional in the limited correspondence I have personally had with them, regarding questions about their service.