[sarciszewski]

Especially when the objection I raised is that the server can perform privileged active attacks on the client software.

I'd say avoid Tutanota.