
I was skimming through the privacy policies for Proton's ecosystem, and I wanted to get some clarification on this immediate section of Proton Pass' privacy policy. When stating that "... alias addresses created in Proton Pass are not encrypted," what does that mean exactly? More exactly, what does that look like from Proton's end if the alias addresses, when created in Proton Pass, are not encrypted? What other data would surround this unencrypted alias or could be inferred, if anything? I have mild concerns about this as the aliases, although should be random, could be used in ways by users (perhaps users like me) who might label them something specific, which could then infer the alias' purpose or usage to an outside observer. Although, this would be trivial to mitigate -- I could just let it be randomized -- I would like to someone enlighten me on this matter.
Thank you.