The “Proton is fully compromised” take is just noise. Nothing got hacked, nothing got backdoored. Swiss courts did what Swiss courts do: they forced Proton to hand over metadata tied to an account — payment info, login timestamps, IP logs. The encrypted inbox stayed encrypted.
The real issue is people mixing up encryption with anonymity. Proton protects your messages. It does not protect your identity. If your account is tied to a normal, traceable payment method, that breadcrumb exists — and a court can demand it. That’s not a breach, that’s jurisdiction.
And yeah, if the account had been funded with non‑linkable Bitcoin, there wouldn’t have been payment metadata to hand over. Not because of anything shady — just because you can’t leak what you never collected. That’s the whole point of minimizing data exhaust.
So the TL;DR for Nostr:
ProtonMail = good encryption, zero anonymity
Metadata = the real snitch
Bitcoin = privacy depends on how you use it
Threat models = not optional
Use the right tool for the job, or the job will use you.