>you'd probably be looking for protonmail if your only criteria is jurisdiction. They seem competent enough from the outside - I have no insight into how they operate.
Yep, that's pretty much in agreement with what I said - the technical dance that they go through adds extra protections against one specific type of attack (a legal "hand over data" that doesn't come with a "change your system so you can obtain said data" rider), but it's still worthless in face of other attack vectors.