The linked press release makes no mention of whether or not server side code was audited only stating that:

This year, Recurity Labs(new window), an ISO 27001-certified IT security consultancy, tested everything a Proton Pass user interacts with: the Proton Pass browser extensions(new window), mobile and desktop applications(new window), and Command Line Interface(CLI).

This is still…