I have written a number of posts on this topic on my blog. I just did a post the other week on this topic:
linkMy preference is Cyberghost, the cost is reasonable and they are constantly rated one of the best options. They also have free all the way to premium paid options.
The cliff notes version of these posts is basically, if you are using a non free/non browser based VPN that uses strong encryption, the probability of a 3 letter agency having access to your encryption keys before they rotate is exceedingly low. With that said, bugs and flaws in the code may allow for a back door, but that is also low. The real issue, is street hackers and kiddie scripters. There are tools out there that make it very simple to do a "man in the middle" attack of your connection to a free or even secure WIFI connection.
The bottom line is that you cannot protect yourself from every possible issue, but a VPN is a good start, and simply taking a few extra steps like VPN, doing Windows updates, being smart will mean you will not be the low hanging fruit. Most hackers (if not specifically targeting an individual) go for the best economic bang for their buck, which means targeting the easy "low hanging fruit".
Rob
rvtechwithrvrob.com