On startup, Proton Pass installs native messaging hosts for all major browsers. This causes clutter in the user's home folder and browser configuration, creates a wider attack surface and leaves artifacts that remain after Proton Pass is uninstalled.

This should be configurable in the application settings and on initial run, with an option like 1Password's "Connect with 1Password in the browser" option. Disabling this option would remove existing native messaging hosts and prevent them from being generated on startup.