I was under the impression that if you use proton VPN the Swiss law protects them from disclosing certain information to authorities? Obviously that can change.
Before you start sharing clickbait headlines like "Proton is compromised", "privacy is dead", etc, just read the whole fucking news article first.
Proton always said they would provide whatever they have (metadata) to Law Enforcement if subpoenaed. That was never a secret or in question. They are an actual registered company...
They still don't nhave access to email body content. E2E encryption still works. What they can provide is IP addresses, recovery email, recovery phone, browser fingerprints and email metadata (timestamp, recipient, sender, subject, size).
If you are worried about this (you should), use a VPN (not proton VPN) or Tor, avoid disclosing sensitive information in the email subject.
Despite the FUD, people are still 99% safer and more private using ProtonMail relative to Gmail or similar.
https://restoreprivacy.com/protonmail-discloses-user-data-leading-to-arrest-in-spain/
Discussion
I wouldn't know about that but:
* You should not rely on the law to protect your privacy
* you definitely should not put all your eggs in the same basket: if you use proton mail, don't use any other service from them. Look for alternatives for vpn, cloud, password manager, notes, calendar, etc and spread your risk as much as possible. Ideally most of the above can and should be selfhostable.
Reading one of their Mastodon posts they say that as VPN is not considered a communications tool in Swiss law they therefore don't have to log IP-addresses, and that there are no Swiss laws that can compel them to do so.