Technology

Proton is based in Switzerland, which is not a Nordic country. Neither's Lithuania, but at least the Baltic is Nordic-adjacent.

The notion that the home country of a company operating in multiple countries matters? Only if that home country's regulatory regime can be trusted. In the case of Proton, a US request to the Swiss government led to a Swiss warrant that forced Proton to disclose the details of a user who had criticised the fascist government in the US. Many countries will do favors like that for other countries without any sort of due process. The best you can hope for is that the vendors' system architecture retains the minimum user information needed to sustain operations.