NordVPN are far too aggressive about youtube marketing to not be sketchy imo. Open source client doesn't really help because whatever sketchy shit they're up to is probably mostly on the server side anyway. I wonder what their total youtube sponsor spot expenditure has been. It must be a ridiculous amount of money.
I'm not sure aggressive marketing = sketchy, but it probably means that it's highly profitable.
I regularly see sponsor spots where they're claimed to protect you from credit card fraud and all sorts of other outlandish stuff.