I mainly bought NordVPN to get around the TfL website blocking US visitors, not really for any extra security (I go through my home VPN server for that). While the hack is unfortunate, I'm not sure it's going to cause me to stop using them--assuming they actually fix the hole and take steps to help prevent others moving forward.