Allow logging in to proton account with two different accounts - one as an administrator, and one as a viewer-only. You would then be able to login to your account on 'unsafe' devices with Proton Mail, Drive and Pass, but cannot change any of the settings, or send emails.

This would then only be possible if logged in by the 'administrator' account, which could then be logged in on specific devices only.