In addition, when it comes to encryption that is intended to defeat things like XKeyscore, this isn't it. It's nice that the tunnel to the server is TLS (which

In addition, when it comes to encryption that is intended to defeat things like XKeyscore, this isn't it. It's nice that the tunnel to the server is TLS (which is probably not really safe from the NSA), but you still generally are going to have unencrypted inbound emails coming into the server and unencrypted outbound emails exiting the server, no?