#2 is fair, but I really don’t see any point in encrypting emails at rest when they by design are going to third parties who can do whatever they want with it. I don’t trust emails with sensitive information, so that’s not a problem for me. I wouldn’t have email if that was an option.