They did cooperate with authorities, but they also took their time in disclosures to explain precisely what the user did wrong, and how you can avoid making the same mistakes. At the end of the day, Proton only has the information you provide them. And if you don’t encrypt your stuff, it’s not safe.