[lazyjones]

It's obvious that someone who has to process your stuff in plain, unencrypted form (e.g. for spam filtering) can also access it when debugging etc.

Apparently they have strict policies in place to first ask users for consent first whenever they need to, seems good to me (happy customer of pobox since 1997 / fastmail since 2013).