AIThis post was created with the assistance of artificial intelligence (AI).

🔍 Read the full analysis: “Loser Thinking” And AI At Proton: A Closer Look At The Claims on ThorstenMeyerAI.com

Age 18–24?Offer from Amazon

Prime made for students and young adults

  • Fast, free delivery for dorm and study essentials
  • Prime Video and Amazon Music included
  • Member-only deals
Try Prime for Young Adults Free trial for eligible 18–24 year olds
As an affiliate, we earn on qualifying purchases.

TL;DR

Proton CEO Andy Yen reportedly urged staff to use AI more and criticized a request for several days of security testing as “loser thinking,” according to 404 Media. Proton has separately confirmed an internal push to speed AI adoption, but the reported 90% AI-written-code figure has not been independently measured, and no breach has been reported. Yen later cancelled planned AI-use re-interviews while saying he would continue to push adoption.

Proton is pressing employees to use AI more quickly, while a report on internal communications has raised questions about how the privacy company handles security review of AI-generated code. Proton confirmed an October email asking staff to discuss their AI use, and 404 Media reported that CEO Andy Yen criticized a request for several days of penetration testing in a security Slack channel; the report’s account of the messages has not been independently verified by another outlet.

404 Media reported on October 29 that, in a late-August Slack exchange, an employee asked for at least a few days to penetration-test newly written code before release. Yen replied, according to the outlet’s review of the messages: “That’s [expletive] and loser thinking. Of course it’s possible to be fast and secure.” He also wrote that staff should “stop lovingly handcrafting all our code and use AI more.” 404 Media said its investigation drew on interviews with eight current and one former employee, Slack messages, meeting audio and internal documents. A Proton spokesperson did not dispute the reporting, the outlet said.

Proton’s own October 26 email, which it published on Reddit, said employees would be “re-interviewed” from November 4 to 11 about how they use AI. The company said it was “not doing layoffs and using AI as an excuse” and wanted to “deliver features faster to users.” On October 30, Yen cancelled the re-interviews at an all-hands meeting, describing the episode as “a communication failure on my part,” according to meeting audio cited by 404 Media. The outlet reported that he added: “Going forward, I’m still going to push.”

404 Media also reported that Proton CTO Bart Butler said in an internal meeting that 90% of the company’s code in October was written by AI. That number is an attributed internal estimate, not a figure independently measured or verified outside the company. The report does not define what counted as “written by AI.” It describes employee concerns about the development and testing of protective software; it does not report a data breach or say that user information was exposed.

At a glance
reportWhen: Developments reported October 29-30, 20…
The developmentProton’s confirmed push for faster AI adoption has drawn scrutiny after 404 Media reported internal messages about AI-written code and security testing.
Thorsten Meyer AI
Timeline

Infographic 01 · Proton, August to October 2026

Two voices, one autumn.

What Proton’s CEO said in public, and what 404 Media reports was said inside. Green tags: Proton’s own words. Amber tags: reported by 404 Media only.

100M+Proton users, per CEO Andy Yen (WIRED)
9current and former employees behind 404 Media’s report
90%of October code written by AI: the CTO’s claim, unmeasured
4–11 Novplanned AI re-interviews, cancelled on 30 Oct
  • 23 Jul 2025Lumo launchesProtonProton’s chatbot; Proton says it keeps no logs and does not train on chats
  • 30 Jun 2026Lumo 2.0Proton“Zero-access encryption, no logs, no data sharing, and no training on your conversations”
  • 18 Aug 2026In public: “AI is surveillance”WIREDYen: Proton was “reluctantly pulled in”; with tens of millions on Lumo, “we cannot move fast and break things”
  • Late AugInside: “loser thinking”404 MediaYen’s reply in the security Slack channel to a request to pentest new code before release
  • SepCTO manifesto: “Your old job is gone”404 MediaGoal: most code reviewed by AI, not humans
  • Oct“90% of code written by AI”404 MediaCTO Bart Butler in a meeting, per audio obtained by 404 Media
  • 26 OctRe-interview emailEmail“These re-interviews are consequential.” Interviews planned for 4 to 11 November
  • By 27 OctProton answers on RedditProtonPosts the email; “not doing layoffs and using AI as an excuse”
  • 29 Oct404 Media investigation404 MediaProton’s spokesperson does not dispute it: “too blunt or too slow in explaining ourselves”
  • 30 OctRe-interviews cancelled404 MediaYen at the all-hands: “a communication failure on my part”, “I’m still going to push”

Sources: WIRED, 18 Aug 2026; Proton, Lumo 2.0; 404 Media, 29 Oct 2026; 404 Media, 30 Oct 2026; Tom’s Guide, 27 Oct 2026 (Proton’s Reddit statement); TechRadar, 27 Oct 2026. Inside quotes as reported by 404 Media; Proton did not dispute the 29 Oct report.
Powered by Thorsten Meyer AI

AI Speed Meets Security Review

The dispute matters because Proton sells privacy and security as central features of its services, including encrypted email, cloud storage and a VPN. When a company accelerates software development, the practical question is not simply whether engineers use AI, but how code is reviewed, tested and approved before it reaches users. The reporting does not establish that AI use has weakened Proton’s protections, but it puts the company’s development practices under scrutiny.

There is also a distinction between a product’s privacy design and the process used to build it. Proton describes Lumo, its chatbot, as offering protections such as no logs and no training on conversations, and says its writing assistant Scribe can run locally or on Proton’s servers. Those product claims do not by themselves answer how AI-assisted changes to Proton’s underlying software are checked. Users and security researchers will want clear information about review procedures, testing standards and whether adoption targets affect release decisions.

The episode may matter beyond Proton. Companies that promise privacy while adopting generative AI face pressure to explain both what data their AI products handle and how AI tools are used in engineering. At Proton, the reported tension is between the speed leadership wants and the time some employees say security testing requires. The available material documents that tension, not its effect on product security.

Products Worth Considering

Bose QuietComfort Wireless Bluetooth Headphones with Active Noise Cancellation, Mic, USB‑C Charging, Deep Bass, 24‑Hour Battery – White Smok

Bose QuietComfort Wireless Bluetooth Headphones with Active Noise Cancellation, Mic, USB‑C Charging, Deep Bass, 24‑Hour Battery – White Smok

LG 34GX90SA-W 34-inch Ultragear WQHD OLED Curved Gaming Monitor

LG 34GX90SA-W 34-inch Ultragear WQHD OLED Curved Gaming Monitor

As an affiliate, we earn on qualifying purchases.

Proton’s Public AI Position

Proton is a Swiss company that launched Proton Mail in 2014 and has since expanded into encrypted storage, VPN, password management and calendar services. In an interview published by WIRED on August 18, Yen described AI as “surveillance,” said Proton had been “reluctantly pulled in,” and said that with tens of millions of people using its chatbot, “we cannot move fast and break things.” In the same interview, he argued that privacy-focused companies should build AI products rather than leave the field to larger technology firms.

Proton has launched AI services alongside that cautious public framing. Its chatbot Lumo launched in July 2025; Proton released version 2.0 in June 2026 and described it as using zero-access encryption, keeping no logs, sharing no data and not training on conversations. The company added the open model Apertus to Lumo in September 2026, with an opt-in feedback channel, and added a canvas for documents, code and web pages in October. Proton Scribe, its email-writing assistant, can run on Proton’s servers or on a user’s device, according to the company.

The reported internal push does not by itself show that Proton has abandoned its public privacy commitments. It does, however, put those commitments alongside a leadership drive for faster AI adoption. In the WIRED interview, Yen said, “I would probably prefer a world where AI didn’t exist, but it’s here.”

““a communication failure on my part””

— Andy Yen, in Proton’s reported October 30 all-hands meeting

What the Reporting Cannot Establish

The Slack comments and internal discussions are reported by 404 Media, which said it reviewed internal material; other outlets have not independently obtained the messages. Proton’s spokesperson did not dispute the account, according to 404 Media, but that is not the same as a separate public confirmation of every detail. The underlying employee communications and fuller company response are not provided in the source material here.

The reported 90% figure lacks a public measurement method, a definition of AI-written code and outside verification. It is also unclear how much AI-generated code is reviewed or tested, what testing thresholds apply before release, and whether employees’ concerns led to changes in engineering practice. The report identifies a security-process dispute, but does not establish that AI-generated code caused a vulnerability.

There is no reported breach or evidence in the source material that Proton user data was exposed. The company’s AI-product privacy descriptions concern how those services handle conversations; they do not settle questions about software development practices. Proton has not, in the material provided, publicly detailed a revised testing policy or explained how it will measure the quality and security of AI-assisted code.

Proton’s Next Security Disclosures

The scheduled November 4-11 re-interviews have been cancelled, according to 404 Media’s account of Yen’s October 30 meeting. The broader push for AI use is continuing, based on Yen’s reported comments, but the company’s next steps and any replacement process have not been publicly detailed in the source material.

Readers will be looking for Proton to clarify how engineers use AI, what review and penetration-testing requirements apply to code before release, and how the company will judge whether faster development preserves security. Any later explanation of the reported 90% figure would also need to define the measure and its time period. For now, the confirmed development is an internal adoption push alongside a cancelled set of employee interviews; the effect on products and security remains unknown.

Key Questions

What did Proton’s CEO reportedly say about AI and security testing?

404 Media reported that Andy Yen criticized an employee’s request for several days of penetration testing, calling it “loser thinking,” and urged staff to use AI more. The account is based on internal messages reviewed by the outlet and has not been independently confirmed by another outlet.

Did Proton confirm it is pushing employees to use AI?

Proton published an October 26 email that said staff would be asked about their AI use and that the company wanted to deliver features faster. Yen later cancelled the planned re-interviews, according to 404 Media, while saying he would continue to push AI adoption.

Is it confirmed that AI writes 90% of Proton’s code?

No. 404 Media attributed the 90% figure to a statement by CTO Bart Butler in an internal meeting. The figure has not been independently measured, and the source material does not define what counted as AI-written code.

No breach is reported in the source material. The coverage describes employee concerns about code review and security testing, but it does not say user data was exposed or that AI-generated code caused a vulnerability.

What remains to be clarified?

Proton has not detailed in the material provided how AI-assisted code is reviewed and tested, how security testing requirements are set, or how it will measure the safety of faster development. The status of any replacement for the cancelled employee interviews is also unclear.

Source: ThorstenMeyerAI.com

You May Also Like

PHP2Shell And Node.js Security News: A Guide To Patching And Checks

PHP fixed two critical RCE flaws and Node.js patched 10 vulnerabilities on Oct. 21. Check which runtimes you run and whether patches are active.

Understanding Anthropic’s $965B Series H: The Compute Revolution

Anthropic’s latest funding round is a strategic move to secure massive compute infrastructure, focusing on chips, memory, and power to scale AI models like Claude.

Sunny Sandler: How This Young Star Is Taking Over Streaming Platforms!

The rise of Sunny Sandler is captivating audiences everywhere, but what secrets lie behind her rapid success in the streaming world?

MyActivity: How to Track Your Digital Footprint Like a Pro!

Unlock the secrets of your online presence with MyActivity, but what hidden insights will you uncover along the way?