[lmorchard]

Consider another angle: Mozilla doesn't have experience running a VPN. There are a lot of terrible mistakes to be made there.

If Mozilla can secure a good contract with folks who have run a VPN, isn't that a better technical scenario? I mean, sure, you have to assume that the contract has teeth to enforce privacy guarantees. But I think that's part of the value proposition here.