You can always use DKIM and DMARC for authenticity, standard TLS for the chain and PGP for the encryption if you are really concerned. They offer true oauth+MFA on all connection methods (most use plain text for IMAP still) Storage at rest is more important if it’s about being data mined and privacy like the original post than perfectly non-interceptable in flight comms.

Maybe take a look at fastmail.com