boldsuck there are many tor nodes that are owned by state actors and many state actors have data sharing agreements
Yes some kind people who support freedom operate their own nodes but often ownership is indeterminate.
The liklihood of getting 3 compromised nodes doesnt seem incredibly low. Prior to tor and vpns, governments may have had too much data to examine. Vpns and tor let people self-sort.
With an audited good vpn, unless it's a honeypot the server wont log. There still may be secret devices at all or many data centers that correlate trafic and log packets.
It seems better to use both and trust that neither always is safe and could be always tainted. If every data center has devices that log beyond the servers, then both often only offer illusions, except when 1 node isn't a data center.
They probably dont log everywhere since many scammers still dont get caught. But it may be scammers always use socks5 outside data centers. This is all speculation.