This is actually a pretty good indicator that integrating PGP in a usable "it just works" fashion might be a really good thing to do these days. If the question

This is actually a pretty good indicator that integrating PGP in a usable "it just works" fashion might be a really good thing to do these days. If the question is why are you allowing google the ability to violate your privacy, the solution of running your own mail server is only valid to the extent that we acknowledge the current reality that the vast majority of people do not use encryption or signing for email correspondence. How about a simple sign / encrypt / forward service for untrusted (ie, pretty much everything) hosted email accounts that takes all incoming unsigned/unencrypted mail and at least encrypts it before delivering it to your untrusted mail server? Of course then the issue is how do you prove that you're any more trustworthy than google or any other party, but it's an interesting problem to consider.