Proton's AI mandate is turning security objections into tests of loyalty

Proton's decision to re-interview staff about their use of AI was not an isolated human-resources exercise. Interviews and internal records obtained by 404 Media describe a broader campaign in which executives demanded faster adoption while employees worried that AI-generated products were moving ahead without adequate security review. Nine current or former employees spoke to the publication; several described a climate in which challenging management could endanger a job.

The sharpest example came when a team requested a few days for penetration testing. Chief technology officer Bart Butler called the request “bullshit and loser thinking”, according to an internal Slack message, and told staff to move fast while remaining secure. That instruction collapses the very trade-off engineers were trying to surface. A separate management document said the company had insufficient velocity, was off track on annual recurring revenue and was underperforming on growth. Proton did not dispute 404 Media's overall characterisation, though it said leaders had been too blunt and too slow to explain their plans.

This matters more at Proton than at an ordinary software vendor. The company sells encrypted mail, storage and networking by asking users to trust its engineering judgement against powerful adversaries. AI can accelerate coding and product work, but security review is the mechanism that converts speed into a defensible release. When a request for testing becomes evidence of the wrong attitude, the organisation is training people to hide risk.

The employment interviews therefore function as governance, not merely training. Management is measuring visible enthusiasm for a strategy while controlling the consequences of disagreement. That produces compliance data but little evidence that the resulting systems are safe or useful. A serious AI programme would publish the workflows being changed, the defects and incidents produced, and the controls that caught them. Proton is instead making belief in the programme easier to measure than its results.