Obviously they have user data that be shared. I can’t even remove my card details (burner) when everything is paid for.

But I wonder They got the recovery email and requested a new password for proton… another remember to set 2FA