> In one exchange, an employee in the company’s security Slack channel urged Proton to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August.

There was a moment a while back when 1Password made some decision (I think abandoning delphi?) that made me take a step back and ask if they were a security company or not. In moments like this, I wonder if Proton's pitch is security or not. Even if this is a true take, I think someone saying that they need to be cautious and pentest something before launch is a valid concern, for a security company. Not all companies are security companies, but Proton specifically advertises itself as being security and privacy conscious. It is a bad look for a security company to do something that indicates a lack of security prowess.

I think the writing on the wall for manually writing every line of code is obvious, but that does not obviate the need to secure things. However, pushing for speed at the expense of security, AI or not, is a bad look for a security company.