I'm glad I never got around to exploring beyond their VPN. Still means I gotta find a new VPN provider that doesn't suck, though, and I've no idea what that is these days.

Anyone have any recommendations?

Wish I could take a sabbatical at work to "just" write my own web interface on top of the KeePass format.

This crash can actually be beneficial on the whole, the current status is potentially a huge waste of rare minerals and energy.

Most of the services provided are not in important parts of life-sustaining value chains (like john deere).

It's also hard to turn around a culture once it's been this way. Most of the people with genuine expertise in security and privacy no doubt have been driven out, and those who are most willing to uncritically say yes to anything are who are left. Getting those people to engage in critical thinking and speaking up, oof, takes more than a CEO change. Anyone who succeeds him will need years of committed work to undo cavalier attitudes, toxic communication, and lazy development practices.

Also they push to prod without QA. Hard to believe, but apparently that's what Yen directly told his staff. Apparently checking for bugs before pushing to prod slows down the process and the staff are "losers" for objecting to the new procedure.

I would also be hunting for a different provider. What a shitshow.

the userbase absolutely hates this and a large enough chunk will move away.

@hacks4pancakes

In general, I acknowledge small firms often have a 'mission' that's related more to their product rather than their profits, with larger companies leaning towards the latter. But there's also a lot of overhead running an email service, which makes for economies of scale.
There's presumably a goldilocks zone for email provider size - we just need to gather all the company stats and sort the list accordingly to find the best choices.

That's why it doesn't hurt to use your own domain. Some good mail providers (like mailbox.org) support this.

And if you don't like the mail provider any more, you move the domain with it's atrached mail adresses to another provider (or your own server).