I found this article in relation to nordvpn, but there was one line at the end that now has me concerned about PIA's practices and security:
I wouldn't want LTT unknowingly signing up viewers with a malicious actor, regardless of if they're paying the bills or not. That being said, what I saw on PIA seems much less shady than the rest of my linked article on Nordvpn.