https://proton.me/legal/privacy

I think for most use cases their security is pretty good. The transparency seems to show a fairly proportional increase in accommodation of requests as the user base has expanded. Almost anything is better than running unencrypted traffic through your ISP directly.