Sure if someone had a certain threat model they would want to scatter their service providers more. It does go on trust a bit that Proton is doing what they say, considering you can't "prove" they don't keep logs and that I never personally loaded a public key onto a server for them to encrypt with; they kind of hand-wave it and I assume my password is used to unlock a key that decrypts content client-side.