Restore the auto-logout feature (make it optional)
Up until recently all I had to do to log out was close the browser tab/window or the browser itself. Now, Protonmail keeps me logged in even after I close the browser. I would like the option of having it work the old way.
It is much worse than that, they store session ID in a cookie on your machine, so anyone with that cookie (it is just a file on disk) can log into your account.
This is MAJOR security lapse from Proton team.