Furthermore, you can always run another VPN on top of that if you don’t trust the outer one with the actual plaintext traffic.

Not on mobile - iOS doesn't support nested VPNs, and neither does stock Android.