From what I have heard, the best help for them would be for their CEO to get the boot ASAP.

Perhaps work-to-rule is the best action: he wants them to "move faster" since committing "AI" code without full audits and pentesting is "loser thinking"? OK, code up that AI slop faster than ever before, and merge it without any review! Then let ProtonMail/Drive/VPN fall over and he can go explain to the press why.