I can understand requiring a captcha for registering, but not for logging in. Also: does anyone know if they have to do this even if you have a Protonmail cookie set in your session?
I wonder if it's a response to the recent incident with Ryanair plane got grounded by Belarus. I believe an anonymous email with a bomb threat was sent with ProtonMail.