When a website requests confirmation of the account's current password, then Proton Pass very often fails to populate the field with the current password. Instead, Proton Pass always attempts to generate a new password.

Please present an option to populate with the current password, before assuming that I want to generate passwords.

The current UX is risky. Password confirmation tends to coincide specifically with account actions involving changing account email addresses, changing account passwords, chancing account usernames, and/or changing 2FA options. It's easy to accidentally submit a generated password for fields that really need the old password.

This can lock the user out of the account.

Depending on the website, the user may be locked out for several business days waiting for an administrator to respond to support requests. Some websites may have no account access recovery option at all.