Honestly I think some folks obsess too much over jurisdiction and forget that a tight setup is a tight setup no matter where the VPN lives. It's all about footprint control, not legal jurisdiction. Black hat players, white hat, doesn't matter, the data and how you handle it is king.