AINEWS
Bart Butler says a Swiss payment data request that helped the FBI unmask a Stop Cop City protestor is the test, not the betrayal, of what privacy as trust can deliver.
The Swiss government didn't break Proton's encryption. It asked a payment processor for payment data tied to a Proton Mail account, and the FBI used the result to unmask a user tied to a Stop Cop City protest, according to 404 Media reporting earlier this year. Proton, the Switzerland-based, foundation-governed company best known for encrypted email and now expanding into docs, calendar, and an AI assistant called Lumo, has a CTO — Bart Butler — who calls that episode the test of what "privacy as a product" can and cannot do.
The argument, laid out by CTO Bart Butler on The Verge's Decoder podcast, is short and uncomfortable. "No company is going to go to jail for you," Butler says. Encryption protects the contents of a mailbox against the operator and most third parties. It does not protect a user's identity at the payment rail, against a court order, or against the user's own legal exposure. "Privacy as a product" works only if the reader understands what it actually covers, and what it deliberately does not.
Proton's structural bet is two pieces stacked on top of each other. The first is Swiss jurisdiction. Proton is headquartered in Switzerland and has publicly threatened to leave the country if a proposed surveillance law passes, framing Swiss neutrality as a partial defense against compelled access. The second is governance. About two years ago, Proton transitioned to a nonprofit structure governed by a foundation, per the company's own writing on the Lumo security model, and Butler explicitly invokes that structure as a guard against the kind of mission drift that pushed OpenAI's nonprofit arm into a corporate subsidiary.
Butler uses the OpenAI comparison deliberately. The OpenAI nonprofit structure was supposed to lock in a mission; instead it now sits beside a capped-profit subsidiary that has raised at scale and operates under different fiduciary pressures. Proton's bet is that putting the foundation in front of the operating company forecloses that path. Whether it does depends on details not in the headline: how the foundation's stake is structured, what its reserved powers actually are, and whether the Swiss government can compel a foundation-governed entity any differently than a private one. Butler's argument on Decoder is that the structure raises the cost of mission drift; he does not claim it eliminates it.
The Swiss payment-data episode is the proof point and the limitation at the same time. Proton's encryption held; the unmasking happened because payment metadata, which sits outside Proton's product, flowed through a separate legal channel to a US agency. From Proton's perspective, that is the system working as designed: Proton did not hand over mail contents, and the user was identified by a path Proton does not control. From the user's perspective, the result is the same as a breach of trust. Butler's answer to that gap is the spine of the interview. Proton can narrow the threat surface. It cannot substitute for what a user has to do themselves, which includes understanding that no operator, however trustworthy, can take legal risk on their behalf.
The pending Swiss surveillance bill is the second test. Proton has said it will relocate if the law passes, and independent coverage from TechRadar treats the exit posture as live rather than rhetorical. Butler's argument is that jurisdiction is itself a product feature, which means the feature has a half-life tied to Swiss politics. If Proton leaves, it preserves the structural bet; if it stays, the bet is renegotiated. Either way, the user is buying a narrowed threat surface, not a guarantee.
What Proton is selling, on this telling, is a specific kind of trust. Mail, calendar, files, and now the Lumo AI assistant sit inside an architecture designed to keep Proton itself out of the contents of user data, backed by a foundation structure meant to keep Proton itself on mission, hosted in a country whose privacy posture Proton treats as a load-bearing feature. Encryption is the floor. Jurisdiction and governance are the next two stories. None of those layers are about the user, and the CTO's core point is that they should not be mistaken for it.