The bigger issue isn't a privacy one, it's a security one. For many people, if you can get access to their email box, you can account-reset your way into any other account they own. So if an authoritarian state compromises your account (because they control the servers), there goes your everything