PS: Andy has partially responded to article in the ProtonMail subreddit. He has alleged that 404 took his comment about security out of context and offered absolutely zero context or explanation about that "Calling his employees losers" bit.

Here's his full comment:

Happy to answer actually, since the quote above was taken out of context. Proton today does way more security reviewing than we have done at any time in the past. With the proliferation of AI tools, our code is also under more third party scrutiny than ever before. We see this across the industry, with critical software bugs (like the recent PHP bug) being found on an almost daily basis. However, several extra days of human review is not the correct way to confront this challenge. We still have human review, but now augmented by AI, has become exceptionally good at finding vulnerabilities in code. For some time now, Proton has also been using unaligned models with custom skills to do a thorough review of our code. This approach is better, and also faster.

I got myself tied up so deeply in Proton.. email, password manager, VPN, storage. Never doing an all-in-one service again. I'll find separate services for each of these, and if one goes to shit, it'll be less work and less time to switch.

Custom domains should be talked about more at some point in our lives for sure. That's the key, it makes switching services so much easier and feels kinda like the end game for at least one part of our lives lol.

Yeah, if I end up switching providers, I’m bringing my own domain next time so at least my email addresses can stay the same.

Mailbox.org is nice