PIA is such a weird one. They’re massive and know what they’re doing but ownership and jurisdiction have always been questionable. I have long suspected they cooperate with GHCQ but only on legitimate national security cases not piracy.
ProtonVPN has been a known data miner for years now. Cryptostorm’s admins do know what they’re doing. If you want an audit see mullvad or ipredator
Tor is not for torrents, they have documentation specifically warning against it as it hurts the network and your anonymity. Tor is TCP based. You’re looking for i2p which handles UDP, has its own torrents and integrates with torrent clients. https://geti2p.net/
Other providers who know what they’re doing include cryptostorm.is, PIA, and ipredator.se
Or make your own with a VPS with openvpn or witeguard
https://interviewfor.red/en/index.html
This is where most of the music ended up after what.cd