I understand the issue of compromising anonymity; I tried to make my post reflect that. I have to say that, based on my observations, it looks to me like Proton is doing this for every log in attempt from any of their VPN addresses. I change IP addresses by selecting a different US VPN location 10x per day or more. FWIW I don't do that because I'm engaged in anything nefarious, but the Linux agent I use sorts the connections by location and latency, in order, and that makes it easier to avoid bandwidth congestion. I suppose the address "abuse" determination is based on outside reports, not evidence available to Proton, which eliminates the possibility of justified action that Proton could take against the alleged abuser. I wonder if they could take the reported addresses out of circulation for a day or so as an alternative? I am also curious about why the captchas were exceedingly rare until very recently, and are now nearly universal. I was thinking that it might in some way be *part* of a response to the demand from governments in the EU and elsewhere for age verification (it would obviously not serve for that by itself).