To clarify, this isn’t about selfhosting or wanting a free service. I already pay for an email provider and I have no intention of hosting one myself. This is only about principles.

Does anyone know if the NixOS packages are safer from these types of attacks? As far as I know many packages are missing maintainers.