Can’t tell which works best but here’s my experience with Windscribe:
(+) there is a native Linux app
(+) it’s open source
(+) they provide a pacman package
(-) only as download from their website
(+) they provide an online config generator for all supported protocols like Wireguard