Report · blog.raed.dev
It wasn't AI that flipped Proton's charge

blog.raed.dev
Source published November 1, 2026
Summary: 1 min read
56/100
Summary
Proton CEO Andy Yen reportedly told an engineer that requesting several days to penetration-test new code before release was “bullshit and loser thinking,” while urging staff to stop “lovingly handcrafting code” and use AI more. The reported exchange occurred in Proton’s security Slack channel and followed leadership’s push to expand AI use inside the privacy-focused company. The criticism centers on Proton’s leadership and software-release practices rather than on AI-generated code itself. AI coding tools can be used with review, testing, and clear accountability for production releases. Proton’s products depend on user confidence that security-sensitive software, including email services, is developed and tested carefully; a flaw exposing user mail could seriously damage that trust. Staff were reportedly told that their AI use could affect whether they retained their jobs. After that plan was dropped following a leak, Yen reportedly said it had already served its purpose. A Proton employee writing on Reddit said Yen supported penetration testing provided it did not slow the release pipeline. The reported events have raised questions about whether Proton can maintain security testing standards while leadership prioritizes release speed and AI adoption.
Key Takeaways
- Proton CEO Andy Yen reportedly dismissed an engineer’s request for additional penetration-testing time as “bullshit and loser thinking.”
- Proton leadership reportedly encouraged greater AI use for coding, and staff were told AI usage could affect job retention.
- Security review and testing remain necessary safeguards for AI-generated code before it is released.
- Proton’s privacy-focused business depends on careful development practices and user confidence in the security of its services.
What the discussion said
The thread is less interested in whether Proton should use AI at all than in whether an AI-driven push for speed is incompatible with a privacy business whose entire value rests on caution. Commenters repeatedly return to the reported incident in which security testing was treated as an obstacle: for an encrypted email provider, pentesting and deliberate release cycles are not bureaucratic drag but the product customers believe they are buying. Many see the CEO’s rhetoric and reported AI-related pressure as a self-inflicted trust crisis, made worse by prior worries that Proton has chased feature expansion over polish. A smaller group argues that the backlash is racing ahead of the evidence. They find the internal AI guidance more measured than the surrounding coverage suggests, use coding assistants themselves, and reject the idea that AI-authored code is automatically reckless. One forceful pro-AI view casts resistance to AI-assisted development as denial of tools that can aid programming and security work; even supporters of that view concede that expert review remains essential. The practical consensus is narrower: AI can improve developer productivity, but it cannot excuse cutting validation, weakening privacy safeguards, or treating careful security engineering as a liability. Customers who chose Proton specifically to escape Big Tech say this kind of AI rollout gives them a reason to prepare an exit.
Where opinion split
The sharp dispute is whether Proton’s AI adoption represents sensible modernization or an unsafe growth mandate. Defenders say AI coding tools are becoming normal and the reporting overstates a limited set of internal comments; critics say a privacy provider cannot prioritize AI-fueled velocity over adversarial testing without destroying the trust that differentiates it.
Coverage & discussions
Hacker News · blog.raed.dev
Community discussions
Community Sentiment
Positives
- AI-assisted development can be a legitimate productivity multiplier, provided experienced engineers inspect its output rather than treating generated code as self-validating.
- Some customers still regard Proton as a stronger everyday product than Google or Microsoft alternatives, and see no demonstrated evidence yet that internal AI use has compromised their privacy.
- Security work need not reject AI outright: locally run tools and supervised model assistance could help pentesters without sending sensitive code or data to outside providers.
Concerns
- Treating a request to pentest before release as resistance to progress turns the exact discipline a privacy service sells into an obstacle, inviting catastrophic trust failures.
- An AI mandate framed around revenue velocity looks especially dangerous for encrypted communications, where one rushed defect can outweigh years of feature delivery.
- AI coding output remains error-prone enough that claims it can replace careful hand-built security work read as overconfidence, not a credible security strategy.
- Customers fear Proton is copying the familiar Big Tech pattern of chasing AI and feature growth while stability, bug fixes, and privacy-first craftsmanship lose priority.
Related Articles

Manifestos, Fear, and 'Loser Thinking': Inside Proton's AI Reckoning
Oct 29, 2026

Proton's CEO Cancels AI 'Re-Interviews'
Oct 30, 2026

Proton Spam and the AI Consent Problem
Jan 23, 2026

AI didn't delete your database, you did
May 5, 2026

Proton to 'Re-Interview' Staff About AI to See Who Gets to Keep Their Job
Oct 26, 2026