This. The best you can do is encrypt your messages locally before sending. But then your email service provider still knows where you are, when and to whom you are sending the message to, and how long is it. And so does the recepient’s email provider and anyone in between. Best they can do is to promise not to keep that data. But it’s just that - a promise, which there is no way to verify.
Could you clarify what you mean by snake oil?
Email is insecure by default. These companies play on wishful thinking to make people feel better about using it.
This. The best you can do is encrypt your messages locally before sending. But then your email service provider still knows where you are, when and to whom you are sending the message to, and how long is it. And so does the recepient’s email provider and anyone in between. Best they can do is to promise not to keep that data. But it’s just that - a promise, which there is no way to verify.