I generally dislike it because its closed source

I mean, the user clients are open source (right? correct me if I’m wrong). So if you compile it yourself, it should be safe.

So for the contents of email, drive, calandar, those things should be safe. They could secretly keep a log of metadata and IP addresses, tho. The VPN, yea that is basically just requiring trust

Also, Proton AG is now controlled by a Non-Profit organization, Andy Yen is only one of the five board members.