Even then someone could register proton-mail or getproton.co or any other official sounding variant and if you’re not paying attention carefully you could fall for it. Not saying it would be easy or you personally but if you extrapolate this to tens or hundreds of thousands of people; there will be scammed people.