

You can always use DKIM and DMARC for authenticity, standard TLS for the chain and PGP for the encryption if you are really concerned. They offer true oauth+MFA on all connection methods (most use plain text for IMAP still) Storage at rest is more important if it’s about being data mined and privacy like the original post than perfectly non-interceptable in flight comms.

I like the cdfinder suite of products, neofinder on Mac, abemedia on windows and Linux. It keeps in depth catalogs and thumbnails of media for long term archives. You can also save scans from beyond compare so you can do a sync comparison of files against an pre scanned offline media.