I bought a lifetime pass to PureVPN about five years ago and it's okay. I don't like that you have to install their dashboard frontend, seems it would be awful easy to get rooted, but it has some nice features, such as split tunneling.
Port forwarding, etc. are all optional at additional costs.
I think they all collect logs, regardless of claims otherwise. PureVPN actual proved this, do a search for more info.
I use Brave in TOR mode, but the onramp will still be logged, or not (if they do as they claim)
Don't forget to disable WebRTC whenever possible. Also, if you run a Pi-Hole server and have it configured to use Cloudfare, those DNS leaks will still be there, in my experience anyway