I write this not because bellingcat is in the news. But because ProtonMail just sent me something about some fundraiser where they are donating proceeds to a bunch of groups including bellingcat and I thought "WTF? Do I need a new email provider?" I guess I do.

IMHO every service out there that is marketing "privacy" or "security" should be seen as highly sketchy right from the get-go. I no longer trust ProtonMail (well, I never trusted them with anything other than my boring emails anyways).