Most email providers already implement (and with very large user bases which provide testing) all the features you'd have to implement yourself for proper secur

Most email providers already implement (and with very large user bases which provide testing) all the features you'd have to implement yourself for proper security, like 2fa, password encryption, password reset workflows. To implement all that yourself, highly likely you will not do it as robustly as another provider. Also very costly in time.