I feel like by the time you're running an email box which is in your physical custody and have it tunneled through TOR to some public domain/proxy purchased by a straw-buyer, your data at rest may be very secure but you're throwing up hella smoke signals.