freeborn | ἐλεύθερος | 8r0gwg on Nostr: I generally like Proton products. But: - having them generate or store our private ...

I generally like Proton products. But:

- having them generate or store our private key for reading/writing emails rather defeats the purpose
- having them generate or store our private key for VPN connections rather defeats the purpose
- every VPN config generated gets its own private key - that they generate - instead, there should be a single spot for my *public* key for which I can prove ownership - and that should be used for any and all generated configs to their various endpoints
- same goes for email - and signing an email message should happen via some extension that never phones home
- to wit: they should never see our private keys

does anyone use a proton bridge with, say, thunderbird or some other locally-hosted client? how do the smarties do this?