All valid concerns, but where is the tool that fixes all of them, while keeping the decentral organization that email allows?
I recently noticed that some of our federal offices allow to use pgp when communicafing with them. I still think it is an improvement over exchanging unencrypted email with them.