The article appears to be an obvious attack on ProtonMail. It’s clear that private keys are held client-side-encrypted on servers. You need that to read your

The article appears to be an obvious attack on ProtonMail. It’s clear that private keys are held client-side-encrypted on servers. You need that to read your emails in new devices. It’s standard and doesn’t lower security. It’s also obvious that any website could serve you with bad Java script code. Waste of time.