Protonmail itself is legit, and it's an extremely secure email service. This however is pretty lame and really shouldn't be done. If they are doing this, I then question their business practices and whether or not they are truly honest about their mail service.