Few years ago they killed their killswitch . I believe it was technically still an option but they reduced it’s capabilities so that it wasn’t functionally a reliable killswitch.

They also got heat for installing root CA certs. https://www.techradar.com/news/new-research-reveals-surfshark-turbovpn-vyprvpn-are-installing-risky-root-certificates

I believe both issues are “fixed”, but they were some questionable decisions