The simple answer is that you need to trust the operator of the VPN service and what they may do with your data. Why do you want a public VPN service in the first place? If it’s to hide your online activity from your ISP or government, does your chosen VPN provider share that information anyway, or do they share it with data brokers and other parties anyway?
I don’t have personal experience with SurfShark, but it looks quite expensive for monthly service ($18). Obviously they want you to sign up for an annual ($3.40/month) or two year plan ($2.50/month). It appears that they have at least been audited by Deloitte. I’ve had good experiences with vpn.ac and Proton, and Mullvad frequently gets top recommendations.
You’re right. Imagine having to put more resources into Mississippi than Mississippi puts into anything.
How would other countries have responded if instead of building The Great Firewall, China had demanded each international company not allow Chinese citizens within China to access certain parts of their websites?