[nbhuik]

Neither Tavis Ormandy nor Google have a good track record when it comes to pragmatic security. Google's business model is incompatible with proper security. Chances are that you know Tavis from him being arrogant on project zero so everyone who runs old versions of something, like all the millions of insecure android handsets, can get owned by script kiddies. People have been listing alternatives, but the whole point of giving something like gmail away for free is so there won't be any real alternatives. It isn't like it is going to make a difference either way, since Google's position in the market mean most people won't switch.