In trying to resolve some of their latency issues for their Linux client (on Github) I realized everything was being funneled through Neustar, which was the issue. So I questioned them about it, and they confirmed it.
There is a particular leaks site that also called out Proton for routing their connection thru a similar shady service in the past.