Yes, and this is the best one can get in 2021. So it would be nice if everyone stopped attacking them at every step and started building that mythical private e-mail service that they’re talking about instead.
How can they not be transparent? They don't have any technical reason to make any security claims.
With email it's either that or they go after wherever you're hosting from.