I also think this is the scandal waiting to emerge in this space; with what we know from Snowden/CryptoAG/Encrypted message app sting operations etc it is borderline impossible for me to believe not one of the major players is owned by a State level intelligence service.
Kape Technologies, an Israeli firm with ties to Israeli intelligence, owns several well-known VPN companies, including PIA, ExpressVPN, and Cyberghost.