The interesting part is that they allegedly were able to track down proton and signal via just the IP. But there's a lot of "allegedly" on this article.
Federal prosecutors say that the IP address associated with the Proton Mail account, along with other evidence, indicates that Payne Jr. was the alleged user of both the Proton Mail and Signal accounts, the complaint says.