That is true, but very often when people have been caught like that, it didn’t have anything to do with Tor but just poor opsec, like literally using an email with your full name which kind of makes using Tor pointless anyway. If you can link me any events where people were caught any other way than the perpetrator not exercising good opsec, I’d love to take a look.

If you ignored everything that was just said then yeah, sure. Wonder why Tor exists... Ah well, must be just for show.

If you truly care about privacy, you can go for a provider that asks for no personal details (not even an email if you so desire) and allows you to pay using an anonymous payment method such as Monero. In this scenario it would be incredibly difficult for Mullvad to rat you out even if they wanted to, assuming you only used the VPN for anything but things that could trace back to you (so no logging into services with firstname.lastname@gmail.com.) True privacy and anonymity is difficult to achieve but it is possible, just requires you to pay attention.