All this has occurred to me, but I didn't want to be a total bummer. Wasn't it the NSA who used a front to sell a "secure" encryption service to foreign nations?

At least ProtonMail might keep your data out of the hands of Google/Facebook. As long as you mail only to others who are also using ProtonMail.