Hosting based LSPs like greenlight probably have a way different privacy trade off that I have not deeply explored yet but I'm assuming they see everything.
This is what I assume too. If true, VLS via a greenlight-like service is amazingly non-custodial but less private than using a noncustodial node with channels to just an LSP because the node provider knows where payments are going ... but maybe this is where a 3rd party trampoline could be used.