[sneak]

With or without ephemeral keys, when people log in, the servers will, at the time of login, have access to the passwords of the users — the same passwords used to decrypt the private keys which can access those users' encrypted email messages.