[torstenvl]

Any concept of "strong security" that doesn't consider losing access to be a security issue is, at best, amateur.

If a state actor can't access your email, but you also can't access your email (and receive notices of login attempts, password reset attempts, server intrusions, etc.), then you absolutely do not have a good security posture.