Comment on Update: Bitwarden posted to X this evening to reaffirm that it's a "packaging bug" and that "Bitwarden remains committed to the open source licensing model."
They’re not really comparable since Bitwarden has the source available for auditing and Proton Pass (server) does not.