I think this is an issue if you disable tor support in Amethyst. With tor enabled I see maybe 20-30 tcp sessions as I guess the rest of the relay connections happen via tor. With tor disabled I see over 1000 tcp sessions which as you say is retarded. This sort of thing is likely to get flagged by some DoS protection systems. I can see this also being an issue for users behind CGNAT where users are allocated a block of ports which may be limited. It might have actually been NAT session monitoring that flagged it with Proton as I believe their free VPN is NATed.