Wasn't Proton launched as a "your data is encrypted at rest, we could never access it without your consent"? The implication being that even if they received said court orders, they didn't have anything to give. Am I misremembering that?

They encrypt your data insofar as your email, files, etc. but that doesn't mean they don't have information potentially useful to the authorities. See the recent headline where they revealed a user's payment information allowing them to be identified.