@jordanlund @fl42v I *think* this one could be recoverable if they had a terminal still active by using the dynamic loader to call chmod — or by booting from a liveCD and chmodding from there.
That'd likely get you to a 'working' state quickly, but it'd take forever to get back to a 'sane' state with correct permissions on everything.
@ShaunaTheDead @CowsLookLikeMaps The ProtonVPN app is native. It's basically a frontend to NetworkManager.