I don't know one way or the other how easy it is, but if I were an activist in an oppressive regime I wouldn't want to use a VPN that is connected to my identity in any way. I wouldn't trust zero-log policies to keep me safe, there are too many unknowns about the way they run these services and what metadata they have to turn over.
Right. Western governments are much, much better at mass covert surveillance.
> it is likely far harder for PRC or DPRK to get data from Proton than it is for Spanish police
You balk at the idea of a western government being oppressive while pointing out that our “secure” email services can be easily compromised by government action.
“Ideally, in our view, it would be desirable to legislatively prevent EU-based service providers from implementing end-to-end encryption,” Spanish representatives said in the document.
I would say most people are concerned with dragnets, not targeted attacks. There's quite a lot you can hide from the government in terms of dragnets, in the same way you'd hide from big tech.
"Hide" isn't the right word. "Defend from" I think is probably better. Defending our constitutional rights from government and defending our privacy from big tech.
I'm actually perfectly okay with governments in targeted attacks (where a warrant is reasonably given). I'm just not okay with police being lazy.
How does mailing them your money help against a dragnet? How does a VPN help against a dragnet? Like the government can spy on (and somehow SSL MITM) your home ISP but not spy on your VPN ISP?