The phrase in the title is a common trope that comes up when VPN services are discussed. While this statement is technically correct, it can be misleading, as it implies that all providers handle law enforcement requests and prepare for worst case scenarios similarly, so their conduct cannot be a differentiating factor when you evaluate them.
Try AirVPN. They allow port forwarding and have fairly extensive configuration options.
I like AirVPN, my main issue is server stability. iVPN and Mullvad at least were able to maintain a connection continuously for weeks on end across various networks, but this is not the case for AirVPN. It’s to the point where I’m considering alternatives because I’ll start using my device only to find out the VPN tunnel has died and I have to manually reconnect it.
Been using them for many years and several instances I leave permanently connected. I can’t recall a single instance of AirVPN disconnecting from their side.