So the source isn't of much use except for verifying that the encryption is robust?

How is that for protonmail?