I've been using mullvad for a few years—since PIA got bought out—and would recommend it if you're concerned about trust.
So, using a VPN doesn't actually eliminate all possibility of being tracked. All you're doing is replacing who can potentially see all of your data, from your ISP to the VPN provider, so trust is actually a pretty important factor.
When I switched the consensus at the time was that mullvad was the most true to its privacy statement, i.e. trustworthy. A lot of other vpns are cheaper or have more bells and whistles, but have histories of data breaches or scandals, are based in countries with weak privacy/strong surveillance laws, or are owned by companies that may have an interest in the customers data (like with the PIA acquisition I mentioned).
Mullvad too has had a few incidents where they were served court orders to provide data to the police, but iirc no data was ever actually given up. Plus, they allow a bunch of different privacy-centric payment methods, including just sending cash in an envelope.
I'd recommend taking a look at some more recent discussions comparing VPNs but I think considering mullvad is a good place to start.
I don't doubt the possibility that Israelis were behind this attack, but there's a good chance this really was done by Hamas/Hamas related groups. from this post to the sub just earlier today, a Hamas official mentioned potential attacks against the pier:
https://apnews.com/article/hamas-khalil-alhayya-qatar-ceasefire-1967-borders-4912532b11a9cec29464eab234045438
so it could be a case of Hamas cutting off their nose to spite their face. I'm gonna have to see this reported by non Israeli news sources before I believe it though.