Allow users to NOT choose a default sending address.
This should be very easy. On the page https://mail.protonmail.com/account, near the bottom is a section titled "Address Priority." Whichever address is dragged to the top becomes the default sender address. Simply add an extra but invalid email "address" to the list, with a name something like "No Default." If the user drags "No Default" to the top of the list, then he will be required to manually choose which address to send from.
I feel like this is a very important feature for the actual physical security of some members who may be emailing messages, from politically repressive areas, which could put them in actual physical danger. If someone is in a hurry, and forgets, and accidentally uses the default email (which may be tied to his actual identity) this could be a terrible and costly mistake.
This should be a very simple feature to implement. Just add the invalid email address, labeled "No Default" or "Manually Select" or whatever, to the list. Since it's an invalid email address it won't allow the user to send, until he or she chooses one of the other valid addresses.
Another simple way to implement this would be with a simple check box to select/deselect whether or not new emails would automatically use a default email. SO SIMPLE, AND COULD POTENTIALLY SAVE LIVES!
Andrew S. commented
Definitely worth the tiny effort to implement, unless anyone can think of an objection strong enough to weigh against users' lives.
I definitely agree!
Thank you for such a great suggestion - I rarely remember to double check and it is so unprofessional to send a business related email with my personal/family address.
This is probably not a very sought-after feature, but would probably be VERY easy to add, and would DRAMATICALLY enhance the user's security by making it very unlikely that the user would send an email from the wrong sender address.
Please add this!
Luigi Calamar commented
This is a GREAT idea. I have multiple addresses and invariably I forget to select the correct one - and the default is used.