Ask HN: Threat Analysis of Commercial VPN Clients

Does anyone know if commercial VPN clients such as NordVPN etc have been inspected?

Would be great to know about any prior work that's been done around packet inspection (SSL mitm proxy), vulnerabilities, backdoors before I dive in.

Have looked around but haven't found any good references.