[cuteboy19]

The app ultimately shows you your decrypted email. If client side code is compromised then I don't think this is the thing you worry about

[e12e]

Sending signed and encrypted emails is worse than just reading.