I think the biggest thing I've seen are the privacy concerns over them getting such a large % of the internet's https traffic that it's essentially a man-in-the-middle (which includes your tunnel traffic).