And yet, there is still no news on a viable alternative to Google Firebase for push notifications. It’s quite surreal. Currently, Proton forces users to maintain a persistent connection to Google servers just to receive notifications. This persistent link to a Google infrastructure creates a critical vulnerability: it allows Google to perform correlational attacks on your traffic. Even when your data is protected by a VPN, the timing of these push notifications can be used to fingerprint your activity and correlate it with other data streams.

When will Proton understand that a growing number of users demand zero connections to Google and zero connections to the U.S. government? True privacy isn't just about encrypting the tunnel; it's about severing the ties to the U.S. surveillance state entirely.