https://torrentfreak.com/private-internet-access-to-be-acquired-by-kape/

Some have pointed at Kape’s history. The company had previously operated under the name Crossrider and was active in the advertising space. Among other things, it installed toolbars with ‘potentially unwanted software.’ While the company has since switched to a focus on cybersecurity, this past has made some people suspicious.

https://www.privacyguides.org/en/cloud/

no and no.

yes, you're the only person thinking that, which is why this community exists.

Android friends having to run AV software on their phones

which does nothing, because even IF the "antivirus" detects malware, it has no privileges necessary to remove it.