Chinese firm banned by the U.S. is the shady entity behind a clutch of free VPN apps—with over a million downloads.