That's only a concern if Proton keeps all the envelopes people send them, and the authorities are willing to sift through them all and check the fingerprints on them one by one.