The way I see it, you need to differentiate between security and privacy. Gmail is one of the best providers security-wise, but obviously one of the worst ones wrt privacy.