idlesheep

I think it can be banned if you also don’t criminalize it and implement some kind of harm-reduction system.

This way being caught with a cigarette won’t land you in jail. At most you’ll be fined (though ideally confiscation should be enough). And if you want to quit there are resources.

Heavy penalties should only be for trafficking, which you can achieve by stipulating an amount that counts as trafficking.

In fact, knowing that the only thing Proton was able to hand over was the credit card identifier is pretty solid proof that they in fact cannot access (and thus provide access to) your email account and its contents.

If full anonimity is the goal then stick to crypto or cash payments, because credit card always leaves a trail and not a single email provider is above the law in that regard.

This case is entirely the fault of the user’s bad opsec.

It’s already implemented. Tons of users have already scanned their faces/IDs to prove their identity/age. This is just a global rollout.