@emacsen
And then there's the whole "unbreakable encryption" line of marketing — also false.
I wrote about it in 2014:
https://ipsec.pl/protonmail-security-promise.html
Kobeisi did in-depth analysis in 2018:
https://eprint.iacr.org/2018/1121.pdf
@cjd