I believe them when they say this was an error of vetting because they’d have to be naive to think this wouldn’t be discovered and that a lot of their customers would have an issue with it. But that in itself is troubling. Proton are not some small-fry company with staff numbers in the single digits. Something like this speaks to their lack of planning, organisation and error-checking which are very bad traits for a privacy-centered set of software developers to have.

I’ve always been slightly suspicious of Proton without really knowing why but this and the previous Trump thing have made those suspicions more hardened. Everyone makes mistakes but to not even do basic checking and to lack the organisation and judgement to implement it is not something that inspires trust in the software they develop.