Proton doesn’t require a recovery email.

Proton isn’t the victim, but they aren’t at fault either.