Basically, Mullvad has a great track record, seems to legitimately care about privacy rather than just making money.
As for your mention on protonvpn, the founder did say some weird stuff last year, but so far the company itself hasn’t demonstrated any questionable behavior in regards to data, so it’s still considered safe.