Even though I am aware that, due to its zero-knowledge architecture, Proton considers it extremely important for users to set up various options for account and data recovery, I am still annoyed that new recovery methods are constantly being introduced and that some of them are even enabled by default on existing accounts.

I see this as a significant security risk: in particular, the activation without user interaction (as is the case, for example, with the option to reset the password via a logged-in web browser) on existing Proton accounts concerns me.

Therefore, I would ask Proton to give users the option to disable all recovery methods for their accounts (this isn’t easily possible at the moment, since Proton, unfortunately, makes it difficult for users to disable all recovery methods) and, with this setting, also prevent any recovery methods introduced in the future from being automatically enabled.

In my view, standing up for user freedom also means allowing users to configure even dangerous and high-risk settings themselves if they make a conscious decision to do so. Such an option could therefore be accompanied by a few warning messages before the user can activate it. However, I would very much welcome such a feature, as it would enhance security depending on the threat model.