The documentation says it’s TLS encrypted to the LLM context window. LLM processes, and the context window output goes back via TLS to you.

As long as the context window is only connected to Proton servers decrypting the TLS tunnel, and the LLM runs on their servers, and much like a VPN, they don’t keep logs, then I don’t see what the problem actually is here.