Who said we do? That's up to each person to (consder to) construct a threat analysis. Protonmail uses JavaScript, which can theoretically be serving nonsense t

Who said we do? That's up to each person to (consder to) construct a threat analysis. Protonmail uses JavaScript, which can theoretically be serving nonsense to a specific client. There's no way you will audit the source every time you use it. I use it, for larping, and because I like the though that there is still some competition in the e-mail landscape. Tor is a completely different league... but I don't consider the actions I (might) perform there to be confidential for the rest of my life, so I act accordingly. YMMV.