The issue is that authorities were able to retrieve the private key off the server. Yes, Windscribe adjusted afterwards but, it puts their security practices into major question. If you read their response to the situation it was a ton of side stepping the issue, trying to put blame on other VPNs, or trying to act like a government getting access to one of their private keys was not a big deal.
Windscribe is fine, back when they were shit-tier I grabbed a lifetime pro subscription for $30. For the common user, who just wants to download their very legal Linux ISOs on qbit its a good VPN. I just think Windscribe gets a pass on its history more so then a lot of other VPNs.