> Doesn't Protonmail decrypt at the server? That is, can't Protonmail read your encrypted messages?

It doesn't decrypt them server-side, but since they're the ones serving you up with the webmail interface, you still need to trust them that the webmail code doesn't do anything nasty it shouldn't actually do.