If your're on a paid plan it's pretty trivial for superadmins to read your mail. It's logged, but they can.
https://developers.google.com/admin-sdk/directory/v1/guides/...
As far as I can tell, adding a delegate or forward isn't even logged anywhere, and being able to see what a delegate is doing was added as a feature only a few months ago: https://workspaceupdates.googleblog.com/2022/03/gmail-delega...