It is important to remember that Mullvad NEVER ASKS for personal information.
  • You don't even need to create an account
  • You can pay up with BTC/XMR
Even if they get the servers there's no information going back to you.
You have an account number, that account number is associated with your IP + traffic logs (which may or may not exist, but likely do exist in some form let's be honest), those logs are a fingerprint to your identity.
Better to be realistic about it.
Sure. But it's still pretty great opsec if you are operating from a cafe, public-wifi or from a Tails laptop running the Mullvad browser.