In my case it’s that plus server access. The server access is over SSH, so should be secure, but I’m possibly a bit overly-paranoid.
That takes the requirement off the tech and onto the human to spot and parse the error correctly, which is never desirable. But as I say, it’s an edge case.
Also worth pointing out that VPNs are not only about commercial ones like Nord and Mulled. That’s not what I use in hotels.
As for privacy, its entirely down to preference, but for me, the fact that I’m physically there and they know my face, name, address, business and so on means I’m more keen to avoid them also seeing my browsing habits, given the immediate link. I would argue the ability to tie that to my browsing is more of a privacy invasion than using a VPN provider. This is a personal choice though I don’t expect everyone to feel the same way. People don’t need to justify why they feel like they do, when it comes to privacy.
I don’t think it does: The use of a consumer VPN doesn’t make TLS errors go away; the user must still interpret them and behave correctly when (not if) they’re encountered.
Also: My dislike of VPNs is limited to consumer services. Corporate VPNs and overlay networks like Tailscale are completely different things and most definitely have legitimate use cases.
It does in the situation we’re talking about because the TLS alert is the defence against DNS redirects.
Would probably be a vote for Mullvad.
However, I’ve also used it through Tailscale as an exit node and it was equally as good/easy to use.
I guess with you looking for something that was easy to use short term etc, Mullvad standalone is a “top-up” basis whereas if you purchase it via Tailscale it is recurring each month.