Whatever VPN project you choose, you are giving them access to all your data, so be sure you actually trust them more than your ISP. Free? How exactly do you think they're monetizing providing you connectivity around the world plus servers in other countries...? If you really want it, PAYING for an audited and well reviewed one IS your best bet. Just as it is hackers' and especially governments' best bet to compromise that single point somehow and get all kinds of interesting stuff a lot easier than otherwise...
Perfect illustration of VPN, do you trust the woman's mouth more than going directly?
TOR is fairly secure but hard to use and easy to wander into places you don't want to be. If you do at some point receive enhanced government scrutiny its presence will be a big red flag for further investigation.