(Carl from Obscura here)

Very true, but if even 1 of (Obscura, Mullvad) is honest, there's no de-anonymization.

For traditional Single-Party VPNs, you just need to compromise 1 party, with Two-Party Relays, you need to compromise both.

You certainly think and know more about this than I do so thanks for taking the time. Would adding multiple VPN providers improve the safety of Obscura? Then a compromised VPN provider only exposes a fraction of the traffic. Does that create more risks? Did I just invent Tor but worse?