🔍 Read the full analysis: “Loser Thinking”: What Proton’s AI Plans Could Mean For Your Data on ThorstenMeyerAI.com
Get hardware and tech essentials delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Proton CEO Andy Yen has urged employees to use AI more quickly, according to internal messages reported by 404 Media. Proton separately confirmed an October email about reviewing employees’ AI use, but cancelled the planned re-interviews; it says the company is not using AI as a reason for layoffs. No data breach has been reported, and the available reporting does not establish that AI use has weakened Proton’s security.
Proton CEO Andy Yen has pushed employees to use AI more quickly, according to internal Slack messages and meeting audio reviewed by 404 Media, raising questions about how the privacy company will review and test AI-generated code. Proton has confirmed it planned to re-interview staff about AI use, then cancelled those interviews on October 30; no breach or exposure of user data has been reported.
404 Media reported on October 29 that Yen responded to an employee’s request for several days of penetration testing on new code with: “That’s [expletive] and loser thinking. Of course it’s possible to be fast and secure.” He also wrote, according to the outlet, “stop lovingly handcrafting all our code and use AI more.” The reporting is based on interviews with eight current employees and one former employee, as well as Slack messages, meeting audio and internal documents. A Proton spokesperson did not dispute the reporting, 404 Media said; the outlet reported that Proton did not respond to a later request for comment.
Proton confirmed a separate part of the story in an email it published on Reddit. The October 26 message said staff would be “re-interviewed” about how they use AI between November 4 and 11. The company said the exercise was not a pretext for layoffs and that it wanted to “deliver features faster to users.” At an all-hands meeting on October 30, Yen cancelled the re-interviews and acknowledged “a communication failure on my part,” according to 404 Media’s account of the meeting audio. He added: “Going forward, I’m still going to push.”
Another figure attributed to the internal meeting is that 90% of Proton’s code in October was written by AI, a statement 404 Media reported was made by Chief Technology Officer Bart Butler. That figure has not been independently measured, and the report does not define what counted as “written by AI.” Employees reportedly raised concerns about security prioritization and safeguards. Those concerns are not evidence that a vulnerability was introduced or that customer information was compromised.
Infographic 01 · Proton, August to October 2026
Two voices, one autumn.
What Proton’s CEO said in public, and what 404 Media reports was said inside. Green tags: Proton’s own words. Amber tags: reported by 404 Media only.
- 23 Jul 2025Lumo launchesProtonProton’s chatbot; Proton says it keeps no logs and does not train on chats
- 30 Jun 2026Lumo 2.0Proton“Zero-access encryption, no logs, no data sharing, and no training on your conversations”
- 18 Aug 2026In public: “AI is surveillance”WIREDYen: Proton was “reluctantly pulled in”; with tens of millions on Lumo, “we cannot move fast and break things”
- Late AugInside: “loser thinking”404 MediaYen’s reply in the security Slack channel to a request to pentest new code before release
- SepCTO manifesto: “Your old job is gone”404 MediaGoal: most code reviewed by AI, not humans
- Oct“90% of code written by AI”404 MediaCTO Bart Butler in a meeting, per audio obtained by 404 Media
- 26 OctRe-interview emailEmail“These re-interviews are consequential.” Interviews planned for 4 to 11 November
- By 27 OctProton answers on RedditProtonPosts the email; “not doing layoffs and using AI as an excuse”
- 29 Oct404 Media investigation404 MediaProton’s spokesperson does not dispute it: “too blunt or too slow in explaining ourselves”
- 30 OctRe-interviews cancelled404 MediaYen at the all-hands: “a communication failure on my part”, “I’m still going to push”
Sources: WIRED, 18 Aug 2026; Proton, Lumo 2.0; 404 Media, 29 Oct 2026; 404 Media, 30 Oct 2026; Tom’s Guide, 27 Oct 2026 (Proton’s Reddit statement); TechRadar, 27 Oct 2026. Inside quotes as reported by 404 Media; Proton did not dispute the 29 Oct report.
Powered by Thorsten Meyer AI
AI Speed Meets Security Review
For a company whose business depends on privacy, the question is not simply whether engineers use AI. It is whether code that handles sensitive services receives effective testing, human review and security scrutiny as development speeds up. A rushed process could create risks if it reduces the time or attention given to finding flaws; the reporting does not establish that this has happened at Proton.
The issue also touches a distinction between Proton’s products. Encryption protections and software security depend on different safeguards: encryption can protect message contents, while vulnerabilities in applications or systems may still create other avenues of risk. Users should not treat internal pressure to adopt AI as proof their data is unsafe, but they can reasonably ask what review procedures apply to code that protects it.
There is also a question of accountability. Proton’s public argument for building privacy-oriented AI is that users should have alternatives to products from larger technology companies. That aim does not settle how quickly AI should be used internally or what controls should accompany it. Customers and employees will be watching whether the company can show that faster development does not replace security checks.
Products Worth Considering
Logitech MX Mechanical Full-Size Wireless Mechanical Keyboard, Tactile Quiet Switches, Backlit Keys, Bluetooth, USB-C, Multi-Device, Graphit
Ledger Flex + Folio Crypto Hardware Wallet
Trezor Safe 5 Crypto Hardware Wallet with Color Touchscreen, Black Graphite
As an affiliate, we earn on qualifying purchases.
Proton’s Public AI Position
Proton, a Swiss company founded in 2014, sells encrypted email and other privacy-focused services, including a drive, VPN, password manager and calendar. In a WIRED interview published August 18, Yen said “AI is surveillance,” described Proton as “reluctantly pulled in,” and said the company could not “move fast and break things” while serving tens of millions of chatbot users. He also argued that privacy companies should build privacy-first AI rather than leave the field to technology firms he said do not have users’ best interests at heart.
Proton has developed AI products alongside those public cautions. Its chatbot, Lumo, launched in July 2025. Proton describes its June 2026 Lumo 2.0 release as offering “zero-access encryption, no logs, no data sharing, and no training on your conversations.” In September 2026, Proton added the open model Apertus to Lumo with an opt-in feedback channel. A Lumo canvas for documents, code and web pages followed in October.
Proton’s Mail writing assistant, Scribe, can run on Proton’s servers or locally on a user’s device, according to the source material. These product details describe Proton’s stated features; they do not independently verify the company’s security claims. The contrast between the public emphasis on caution and the reported internal push for speed is the backdrop to the current scrutiny.
““That’s [expletive] and loser thinking. Of course it’s possible to be fast and secure.””
— Andy Yen, in Slack messages reported by 404 Media
Security Effects Remain Unverified
The reported messages and internal practices have not been independently confirmed by another outlet in the source material. 404 Media said a Proton spokesperson did not dispute its reporting, but the available account does not provide an independent audit of the messages or the company’s development process. The 90% AI-written-code figure is an internal statement attributed to Butler, not a publicly verified measurement; its definition and calculation method are unknown.
It is also unclear what safeguards Proton currently requires for AI-assisted code, how penetration testing and code review are scheduled, or whether the company has changed any such procedures. The supplied reporting identifies employee concerns but does not describe a confirmed security failure. No user-data exposure or breach is reported, and claims about possible future risk should not be confused with evidence that Proton’s protections have failed.
Watch for Testing Policies
The November 4-11 re-interviews announced in Proton’s October 26 email will not proceed, according to Yen’s reported October 30 announcement. The next indicators are likely to be Proton’s explanation of how staff should use AI, what review is required before code ships, and whether the company publishes any information about security testing or changes to its development process. No replacement interview schedule or new policy timeline is specified in the source material.
For customers, the immediate practical step is to distinguish product settings from the separate debate over internal software development. Proton’s source material advises users to check Lumo’s chat-history, web-search and feedback settings, and the operating options for Scribe. Those checks do not resolve questions about code review, but they help users understand how their own interactions with AI features are handled. The broader issue remains whether Proton can explain and demonstrate how its push for speed fits with its privacy and security commitments.
Key Questions
What did Proton’s CEO reportedly say about AI and code?
404 Media reported that Andy Yen called a request for several days of penetration testing “loser thinking” and urged staff to use AI more. The statements come from internal messages reviewed by the outlet, not a public Proton announcement.
Did Proton cancel its planned AI interviews with staff?
Yes. Proton’s October 26 email said employees would be re-interviewed from November 4 to 11. 404 Media reported that Yen cancelled the interviews at an all-hands meeting on October 30, while saying he would continue to push for AI use.
Has Proton reported a data breach linked to AI?
No breach or exposure of user data is reported in the supplied material. The reporting describes concerns about code development, review and testing; it does not establish that AI use caused a vulnerability or compromised customer information.
Is the claim that AI wrote 90% of Proton’s code verified?
No. 404 Media attributed the figure to CTO Bart Butler at an internal meeting. The source material says it has not been independently measured and that the meaning of “written by AI” was not defined.
Source: ThorstenMeyerAI.com
