PIA's default encryption is AES-128 instead of the industry standard of 256 bits. So in a sense, it is below par. However, every test and audit regarding AES-128 has found nothing to suggest that it's any more vulnerable than its 256-bit version. This problem is relevant only if you choose to keep the default encryption options in PIA; if you move the stronger setting, your encryption and hashing algorithms will be up there with the best in the industry.