"RoS discovered a number of new findings, and we would like to thank them for their thorough and detailed report. They stated , amongst other things that: that whilst they found some issues, that: “The Mullvad VPN relays which were the subject of this test showed a mature architecture…” and “During the test we found no logging of user activity data…”
Oh dang. Was about to jump to Mullvad for that exactly. Sorry to hear it.
Ovpn.com still offers port forwarding however they were recently acquired by a us company which could be a red flag
can’t personally vouch but AirVPN still has PF if you need it.