a transactional SMTP provider, which is almost certainly selling all outgoing email contents for AI training at least if not even more nefarious things.
That’s a big assumption, and that kind of behavior is specifically prohibited in the privacy policy of most, if not all SMTP relay providers, as well as GDPR regulations. If you think they’re violating their own privacy policy and government regulations and doing it anyway, there’s no reason to think Proton isn’t as well, or any other email provider, so that’s kind of a non-starter argument IMO. Plus this only applies to outgoing emails, not incoming. I don’t know about you, but I send about 5-10 outgoing emails a year, there’s not much to be gleaned there. Incoming is what you’d want to protect more than anything.
They continued harvesting data from users after the users explicitly disabled an option to shut that off. And for that, they owe $4 a person. When are we going to starting fining these companies properly? How about a thousand dollars a person for an infraction like this? Maybe a $98 billion fine might get them to start caring.