One in five of the top 100 free VPNs listed on the U.S. Apple App Store were "surreptitiously" owned by Chinese companies.