I really don't understand the issue. Protonmail is subjected to the Laws of Switzerland. These laws require that foreign requests be first approved by Swiss au

I really don't understand the issue. Protonmail is subjected to the Laws of Switzerland. These laws require that foreign requests be first approved by Swiss authorities, which is already a huge protection from rogue actors, as it shields the company from having to comply to most requests. Once it's passed that hurdle though, Protonmail has to comply (although they seem to do some due diligence and reject some of these requests, or at least ask for reconfirmation[1]). Even if they cooperate, Protonmail can only send limited information about the account[2]. That limited information was apparently enough to correlate with other mail services used by the accused, and LEA managed to get more incriminating information from these, including email content. Mail services often send/receive un-encrypted emails to/from other regular systems like gmail. That means there is an inherent weakness that can be exploited. Swiss law has more stringent requirements than other jurisdictions on what can be collected but it's not a free pass to illegal activity. Know your provider and its limits and take appropriate measures if you need more protection. [1]:https://protonmail.com/blog/transparency-report/ https://protonmail.com/blog/transparency-report/ [2]:https://protonmail.com/privacy-policy https://protonmail.com/privacy-policy