you may scoff but its hardly paranoia, just common sense, ISPs are a constant victim of attacks as are any other large business on the internet. the return is much higher than individuals after all look at the recent tmobile attack hackers aren't all script kiddie dumbasses writing elite speak on web pages.
Attack the weakest points, which would be the AP and the ISP, not the intermediate VPN.
like i said, overzealous belief in one particular entity is a good way to becoming a victim.
If your paranoia extends to worrying that your VPN service provider will be
hacked, I suggest that you are too paranoid to be on the internet at all.
-Michael
