I have my seedbox behind hideme vpn. They seem not that good privacy wise, but for torrenting that's not the main concern IMO.
Port forwarding works and you can get a raw wireguard config to dockerize it.
For general use in e.g. open hotspots I still use mullvad/mozilla vpn as I trust them more. (And can pay cashfor mullvad)