The good ones use real encryption, audited no-logs policies, and fast protocols, plus solid leak