Forgery is easy. Putting the forged document into the chain of custody is, and has always been, the hard part.

If we're talking about financial records, it's been trivially easy to create fake bank statements, or fraudulently place an old date on a newly created document, or even forge wet signatures, since before computers were invented. But getting that forged document into the filing cabinet of a bank or an accounting firm is the hard part.

I can make fake IP logs, sure. I can generate fake videos, I guess (under current tech, that takes a ton of effort and skill to be believable). But getting those logs onto Proton's servers, without Proton knowing? I don't know about that.