404 Media 起底 Proton 内部 AI 转型之争：CEO Andy Yen 强推 AI 引发恐惧文化

Andy Yen, the CEO of Proton, had a message for an employee in the company’s security Slack channel who urged the company to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August. “Stop thinking always of how to be slower, and focus more on how to be faster.”

In a follow-up message, Yen reiterated his point: “only losers think like that.” His ultimate message for the team was to “stop lovingly handcrafting all our code and use AI more.”

That exchange was just one of many that showed how Yen and other company executives are aggressively pushing Proton towards AI. Proton is a Swiss company that famously makes the encrypted email service Proton Mail and a suite of privacy and security-focused products, including an encrypted drive service, an authenticator app, a password manager, and more.

In the last few months, Yen set up an email address for employees to contact if they come across anything blocking adoption of AI at Proton, so leadership can “ruthlessly smash everything that stands in the way of AI velocity;” Proton installed software on workers’ computers that track how much AI code the company is generating; and Yen said this is the last year that Proton will hire engineers at all, and instead only hire people to build things with AI.

That AI push came to head this week when 404 Media reported Proton said it would re-interview staff about their use of AI, with the clear implication that those interviews, and employees’ willingness to embrace AI, could decide whether a worker is fired or not.

404 Media spoke to eight current and one former Proton employees and reviewed Slack chats, meeting recordings, and an AI manifesto written by the company’s CTO. Our reporting reveals a culture of fear inside Proton, where many employees are hesitant to even mildly critique Yen’s views or discuss engineering problems. Workers describe an environment where employees have genuine concerns about security or being asked to develop security products with AI, but feel unable to voice them, lest Yen berates them in front of everyone or threatens their employment at the company.

“The CEO is in full AI psychosis and has been for a while now,” one of the sources told 404 Media.

Our reporting also paints a picture of Proton that is likely very different to the public’s perception of a company with a goal of carefully protecting privacy: one that in reality is barreling ahead with AI as quickly as possible so it can achieve the explicit goal of more annual revenue.

“Due to insufficient velocity,” Proton is not on track to achieve its annual recurring revenue target by the end of the year, one internal document obtained by 404 Media reads. Proton’s year-over-year growth is also “far away from what the market today considers to be good,” and, “By all metrics that matter, we’re an underperforming company.”

In response to detailed questions from 404 Media, a Proton spokesperson did not dispute any of our reporting or characterization of what’s happening inside of the company. 

“It’s clear that some people at Proton are unhappy with our direction, or misunderstand it, and many people are anxious,” they said. “In our determination to move fast, we have sometimes been too blunt or too slow in explaining ourselves to our people. We will work on that, as their questions are the ones we most need to answer.”

💡

Do you know anything else about Proton? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.

Yen, a former CERN particle physicist, projects a measured approach in public, but internally he acts more like what one employee described as a “petulant child.” In May, Proton announced it was implementing post-quantum cryptography which should protect against future attacks from quantum computers. The work took years of effort, with one caveat that it would not work on older emails, only those written after the feature’s launch, at least for the moment. Yen was not happy that Proton was drawing attention to this limitation.

In a Slack channel dedicated to thanking people for their work, Yen jumped in. “Get it fixed,” he wrote, referring to Proton’s Reddit post announcing the feature. “Now Reddit is pissed and we look worse than Tuta,” he added, referring to a Proton competitor. When employees explained to Yen the nuances of the encryption and why that was not immediately possible, Yen wrote, “I find this whole thing stupid. You cannot announce this in this way.”

“Now we are left with two shitty choices. Deprioritize more important tasks for the business to re-encrypt old emails, or constantly get attacked online for not doing it. So maybe you can enlighten me on which of the two shitty choices we will take,” he wrote. “In the future there are two options. Either you guys are confident enough to not fuck this up, or you get my advice to make sure it is not fucked up,” he added. He then told a member of the team that made it to “go on Reddit.”

“So go on there with your personal account and comment to set the record straight,” he wrote. “Perception is more important than truth, the truth doesn’t matter if you don’t win on perception.”

One employee told 404 Media, “Whatever persona Andy [Yen] has out of Proton, he’s a straight up bully inside. He routinely breaks his little facade in Slack and calls people losers and stupid, often for stuff he’s paying them for.”

Ever since launching Proton Mail in 2014 after the Snowden revelations, Proton has steadily introduced new products that make Proton more of a worksuite than a simple email provider. More recently, those products were focused around AI, with the launch of Lumo, a large language model (LLM) chatbot that the company says doesn’t log conversations or train on user data. In June, Proton launched a 2.0 version of its chatbot.

Up until this point, Yen’s public comments on AI were relatively tame. In an August interview with WIRED, he said Proton is “building AI features and AI tools, because I think if the privacy companies do not find a way to step in to build privacy-first AI, we are essentially ceding the future to tech companies that don’t have the best interests of users at heart,” and that the company was “capitalizing” on the backlash to corporatized, invasive AI from companies like Google. Last year, Yen and Proton were criticized for statements he made suggesting the Republican Party and Donald Trump would be harder on Big Tech than Democrats. 

Toward the end of August, Yen’s internal tone on AI shifted to having Proton use it as much as possible, and as quickly as possible, according to the Slack chats and multiple employees.

“The train is coming, get onboard or get crushed. Don’t be the professional fax machine operator in the internet age,” he wrote to the security Slack channel. “I think by the end of this year most developers stop programming and start writing specs for tests that AI will code and run, to validate AI written code that humans will no longer be able to review. This will be the last year that we hire engineers, and starting next year we hire what we used to call product managers, to build things with AI.”

AI is changing how cybersecurity works, with AI agents hacking into companies, and AI assisting in the discovery of gaping vulnerabilities in important code. Many companies across the privacy and security space are grappling with how to deal with AI, either in the development of their products or how to defend themselves against hackers who are using AI. Some may do this carefully. Others are trying to do it as quickly as possible for profit. This account of Proton’s own reckoning with AI provides an unprecedented insight into what is happening inside one security-focused company users especially trust. 

Initially, using AI was banned inside Proton, but the company has since approved AI for all sorts of use cases internally, including processing financial data, drafting customer-facing responses on Reddit and LinkedIn, and writing code “except when that source code contains information that would give immediate advantage to a competitor” or is related to “innovation or R&D [research and development],” according to an internal Proton document seen by 404 Media. Ninety percent of code at Proton in October was written by AI, the company’s CTO Bart Butler said in a meeting, according to audio 404 Media obtained. Much of that code is written with Anthropic’s Claude, multiple employees told 404 Media. And Yen tells employees in Slack chats to use Claude, too. 

“We are a tech company against Big Tech who are spending loads on Claude,” one employee told 404 Media.

In the “bullshit and loser thinking” conversation, another employee pushed Yen for specifics on ensuring that AI-generated code was free of security issues. “AI won’t magically solve our problems, because security is low in our prioritization at present,” the engineer said. Yen didn’t respond directly, and went on to insult one of the other employees in front of the entire channel. The employee “is saying his usual bs of we can do it but we will be even slower than we are today and I’m saying only losers think like that,” Yen wrote, adding that workers should prompt “better.”

“You have the models and the time every developer should be doing this and checking their code which they were doing before manually but now they can do faster with AI,” Yen added. (One employee stressed that engineers still strive to build in a secure way.) 

The second clear signal that Proton was going deep into AI for many employees happened when Butler, the CTO, published a self-described AI manifesto one Friday afternoon last month.

“Your old job is gone,” the manifesto, posted to Slack, told engineers. It laid out a future for Proton that fully embraced AI, and said if the company did not do so, that posed an “existential threat to the success of the mission itself.”

Butler said that Proton needs to change in three key ways: accept that an engineers’ job is now to help LLMs write better code, faster; that Proton needs to get to the point where most code is not reviewed by humans but by AI; and to more fundamentally change the company as a whole, and “commit, as an organization, to the transformation that the moment requires.”

One Proton employee replied in Slack, “Perhaps scaring people with: We are in a new world. ‘Programming’ is dead [...] your old job is gone wasn’t really necessary on a Friday afternoon.”

Butler replied, “It’s supposed to be provocative, because it needs to be. I suggest you read it, think about it over the weekend, and come with your questions to me on Monday rather than on Slack. Thanks!”

An employee told 404 Media, “​​People were surprised and somewhat cringed out, since the document clearly exaggerates what you can do with LLMs today and doesn't address any of the problems you get in return for giving up your code base to the AI Jesus (e.g. AI cannot really maintain a large code base over time).” Another called it “ethically bankrupt.”

Earlier this week, Proton sent the email to employees saying they would re-interview workers about how they use AI in their jobs. The tone was clear; you may lose your job because of these interviews, current employees told 404 Media. “These re-interviews are consequential,” the email read. Soon after, a senior employee spoke up in Slack to Yen about the re-interviewing process. He suggested instead that Proton detect who is falling behind and support them and enforce high quality training.

Yen’s response was blunt: “Let’s put it this way, we already know more or less who is behind. If we were giving up on them, we would not bother with this process.”

The employee replied, “That messaging is fear-based. Which is probably why I suspect there are dozens of other employees watching us talk about this live and except for [other employee] no one else is chiming in.”

“People shouldn’t be scared to talk about this in public and to push back on you and leadership. A fear based culture feels like a cancer to me. It’s the opposite of engineering, you need to talk about things, even uncomfortable things,” they added. Yen eventually told the employee, in front of everyone: “If you are making the accusation that this is a financially driven decision and you don’t trust me when I tell you it’s not, then I think this might not be the place for you.”

Only one other employee chimed in during that exchange: “It’s about the culture you instil, people don’t want to feel like they’re on a tightrope, and yes we understand you want to move fast but there needs to be a balance, people also need support, not everyone is the same.”

“It was also faster for my parents to beat me until I ate my vegetables but I’m not sure it was healthy,” they added.

The exchange with Yen was unusual not only in that someone was debating some of Yen’s ideas, but also that it directly referenced the culture of fear at Proton. “Whenever someone talks back to Andy it tends to be highlighted since very few people talk back to him,” one employee told 404 Media.