Then sadly you don't have security. Understanding the threat model is fundamental: If you don't know what this protects against, it might as well protect again

Then sadly you don't have security. Understanding the threat model is fundamental: If you don't know what this protects against, it might as well protect against nothing at all; My ISP received my emails in plaintext, so I have to assume that they've got a plaintext backup of those emails.