I think it's mostly to do with their advertising tactics and misleading people in what their service is actually doing.
They also had a data breach and did not handle it well.
Maybe there's other stuff I don't remember.. I've never used them, I've been on Mullvad for some years now but considering proton next.
Wingardium leviosa!