I'm tired but:
- you'd need to compare the checksums of their web-based cryptography at every login,
- you could use their bridge but you'd need to give your OpenPGP passphrase to change your settings, for no reason
- they have the CIA at their administration council,
- they have an history of unethical behavior toward Twitter survivors,
- they have an history of spreading conspiracy theories,
- they have an history of contacting hosting providers asking them to remove blog posts,
- they didn't share the Lavabit fundraiser so they could get quietly issued a US National Security Letter (overriding the First Amendment and preventing Ladar from appealing),
- they can access to your entire mailbox anyway, not just to the email contents,
- this has enabled the arrest of Social and Climatic Justice activists, they replied they couldn't resist a Swiss Court order (so that's not their fault I guess, the tech is just bad)…
Why would you trust them for your opsec, and why would you enable them further?