Yeah I would agree with you that given the service they provide (email is brutal), they couldn’t really collect any less info or improve security/privacy much more.

How though? They advertsize themselves as the privacy-conscious Google alternative which they very much are. Idk if I’ve just not been exposed to (their) ads, but do they make all kinds of unreasonable claims like being outside of all legal jurisdiction?

What are they supposed to do as an internationally known and used company? Reject legal proceedings and ignore official national laws?