I think the point of contention is exactly how obvious this is to most Protonmail users. I worry too many read "it's encrypted" and make dangerous assumptions a

I think the point of contention is exactly how obvious this is to most Protonmail users. I worry too many read "it's encrypted" and make dangerous assumptions about what can actually be guaranteed rather than investigating first-hand; this is the real risk of such services, in my opinion. I put "encryption" in quotes to indicate nuance in the characterization. A locksmith installs an amazing door and lock at my home, but keeps a copy of the key at the shop - I think a fitting analogy for what Protonmail is essentially doing here. This isn't a value judgement - such a setup is perfectly reasonable for most people's threat model - rather an honest apprehension of actual trust boundaries.