i'd go with Mulvad - i've read a lot of reviews and they seem to be the most privacy conscious depending on your setup, running a VPN on your router may be the better idea - this way all clients use it and you need not worry so much about a CLI, though just doing <program> --help will give you the info you need to know as for the 5/14 eyes countries, i'm not entirely sure it makes a damned difference, but i suppose it doesn't hurt to avoid them