A security researcher discovered that Mullvad’s exit IP assignments follow a predictable pattern, but the privacy-focused provider is already rolling out a fix.