I recall e-mailing ProtonMail years ago and asking why they chose GoDaddy as a registrar considering their entire existence is based on enhancing security/best practices.

The response I received back was very disappointing and even concerning. I don't think they understand the concept of threat modeling.