If your going to make Riseup decrypt every message on login, might as well have them mirror the email and encrypt with an LE password (They can still claim ever

If your going to make Riseup decrypt every message on login, might as well have them mirror the email and encrypt with an LE password (They can still claim every stored email is encrypted) for any future incoming mail. They won't get access to past mail until the user next logs in but would least get access to any future mail the account receives and you are not in control of any email being received.