Yes, if the server is compromised before a recipient reads a particular email, that can allow the attacker to read that email. However, all emails that are read are deleted from the server and unread emails are automatically deleted after a certain number of days. So, if someone was to compromise the GhostMail server, he/she would only be able to read a paltry amount of messages.