I think it is important that users are able to upload and use custom certificate for their custom domains on Proton.

This would still involve using Let's Encrypt, the main difference is not using Proton's certificate for connections made for custom domains.

This will require being able to securely and privately upload or generate a necessary private certificate, and then creating the let's encrypt entry.