Air still has the best security on paper: OpenVPN exclusivity, 256 bit AES-CBC for data encryption, 4096 bit RSA keys and DHE key exchange. Mullvad is using 128 bit blowfish FFS, and 2048 bit RSA which has been broken for some time now. I need to see actual evidence of the alleged sketchy practices before ditching a technically superior service.