Proton has opened sourced everything so far and I would expect them to do that here. They have whole pages written on why they open source everything and why that helps privacy.

Sure, push a known malware free vpn service while bashing a service that is very well known and respected.

No, it means they haven’t investigated them. If they had they would include them on the list and tell you the details.