Proton users cancel subscriptions after CEO calls security testing request 'loser thinking'

Proton customers revolt over CEO's AI push and security comments

Users of Proton, the Swiss privacy company behind encrypted email, are reporting subscription cancellations and calling for CEO Andy Yen to resign. The backlash follows reports that Yen pressured engineers to adopt AI faster and dismissed a request for extra security testing.

The company later canceled planned employee interviews about AI use and published a statement defending its engineering changes.

Key points in the dispute

• In August, a Proton employee asked for a few days to pentest new code—meaning specialists would try to break into it before release. Yen replied, according to 404 Media: "That's bullshit and loser thinking. Of course it's possible to be fast and secure."
• Yen also urged staff to stop writing code by hand and use more AI, and said he would reinterview employees about their AI use, the outlet reported.
• A proposal on Proton's feedback forum calling for Yen to step down had 2,020 votes when reviewed, with comments from users saying they had canceled or would not renew.
• Yen canceled the re-interviews on October 30. Employees had feared their answers could affect whether they kept their jobs.

What 404 Media reported

The investigation drew on nine current and former employees, internal messages, and meeting recordings. Proton acknowledged to the outlet that management had sometimes communicated too bluntly and that employees were anxious.

Some current and former employees have also posted on Reddit and social media describing a toxic work culture, particularly involving the CEO. These posts document anger rather than a verified count of departing customers. Canceling a paid plan also does not necessarily mean deleting an account.

What Proton's engineering manifesto says

On November 1, technology chief Bart Butler published an engineering manifesto. It argues developers should direct large language models—AI systems that generate text and code—rather than treat them as occasional assistants.

Butler compared manual coding to memorizing phone numbers and envisioned eventually ending most human code review. He also insisted that expertise and testing remain essential, with engineers accountable for work that models cannot reliably handle.

"Your job has fundamentally changed. It is no longer to write code, and LLMs are not here to help you write better code faster," the manifesto reads. "Your job is to help the LLM write better code faster."

"'Programming' is dead. Engineering is not," Butler told his team. "Your old job is gone."

The document calls for company-wide investment in automation, arguing that generating code faster achieves little if approvals and other development steps stay slow. Proton frames avoiding AI as an "existential threat" to its mission.

Why this matters for a privacy company

Proton's main selling point is trust: customers rely on its encrypted email, which scrambles messages to protect their contents. Users questioning its development practices are asking whether faster releases could come at their expense.

AI tools can introduce security problems of their own. Microsoft researchers said a now-patched Claude flaw could expose secret access credentials through malicious instructions hidden in material the coding assistant reviewed. On the other hand, Google's PageBreak system searches its applications for exploitable bugs and checks whether attacks actually work.

Proton's AI ambitions predate this dispute. Its Lumo chatbot comes with protections against using conversations to train AI, but internal AI use was not among Proton's selling points.

What is confirmed and what is still unclear

Confirmed from the sources: Yen's reported comments, the cancellation of the re-interviews on October 30, the November 1 manifesto, the forum proposal's vote count, and Proton's acknowledgment of blunt communication.

Still unclear: the actual number of customers who canceled, since social media posts document anger rather than verified departures.

Sources

• Decrypt