If that’s the case then both of you failed to read the part of my comment where I explicitly addressed that:

The issue is whether or not anyone can associate that IP with yours, and what that comes down to is how willing they are to give up their records when the government asks nicely (or, even more importantly: not so nicely.)

I admit I didn’t include the possibility of the VPN operator themselves being malicious, but it seems weird to call me out for not addressing the issue of record security re:governments/LE when pretty much the entire point of my comment was to address that specific issue because no one else was, no?