To me it just sounds like they encrypt the seed with your proton keys and then decrypt it when using their webui.
They probably store the xpub (which is fine, for most people) tho because otherwise I have no idea how their send bitcoin via email functionality works
