I mean, even a US-based VPN company could look foreign if they have servers outside the US, or even if they just allow multi-hop to third-party servers to/from outside the US. Except then they're even more vulnerable not only to subpoenas but also extrajudicial and unconstitutional raids, as [some journalists](https://www.reuters.com/legal/government/small-town-kansas-newspaper-granted-3-million-apology-over-police-raid-2025-11-12/) have [discovered](https://www.theguardian.com/us-news/2026/jan/14/fbi-raid-washington-post-hannah-natanson), especially in deeply red states but not always...