Hopefully they make whatshisname die on his sword (figuratively, just fire the neonazi(maybe) prick if that's the issue, get not trusting, who can you?). Best I can tell no major breaches, probably still doesn't keep logs (coz that's good legally).

That said, it's a nice VPN, for the price, that allows a port open and gives a 500GB offsite backup (locally encrypted, natch) and email (I care not about their Google Suite equivalent as long as it doesn't break security).

But in general don't let anyone centralize your failure points, get ye a domain that points at an email provider that you can change on a whim. No, email will never be secure without a willing (encryption and there's GPG if you know) partner, that's all BS.