They clearly put a lot of effort in cleaning the mess, as I later discovered myself by being from the same city:
https://news.ycombinator.com/item?id=18611863
It seems very likely now, that ProtonMail just decided to use NordVPN's white-label solution to bootstrap its ProtonVPN business:
In particular, the claim that tesonet controls protonvpn's release signing key.
https://news.ycombinator.com/item?id=17258203