Well I think the problem is less about the product being unsafe and more so that this person wasn’t careful enough to avoid exposing themselves. Pretty much any form of communication is going to carry the risk of information falling into the wrong hands. In this case, it seems they were caught because they had paid with a card, which gave up enough identifying information to tie the account to them. If they had paid in cash or crypto then Proton wouldn’t have as much information to begin with, and so even when they are forced to comply with government orders it doesn’t mean as much. Whether it would have been enough to save them I don’t know.