Proton is not stellar privacy wise either. They claim to be privacy oriented but according to their own transparency report their compliance rate is near 90% and they rarely actively contest the requests. In 2025 data was conceded in over 8000 cases.
–Edit–
In other words they seem to be voluntarily handing out user data to pretty much anyone who happens to ask.


Legislation does not require blind obedience. Requests can and sometimes should be contested. Proton doesn’t seem to be taking a very active approach when it comes to contesting requests.
For example German based tuta seems to be much more active with contests, with reported 75% of user data requests contested/denied, which goes to show that resisting requests can and should be done.
While there are differences between the two companies (tuta being a much smaller player and certainly with its own problems) the difference in compliance percentages is simply staggering.