Agreed

But you can’t have privacy without security, and any privacy brand must have security in their bones.

It is a super important detail, but it’s still unforgivable for an app that expects privacy to be part of its brand identity.

I would report this on news.ycombinator.com

There are a lot of eyes there and you might be able to find someone who works at proton