for email, the protocol itself is insecure by design. if using it for actual communication you should use something like pgp encryption on top. even proton receives your mails in plaintext, though they claim to store it encrypted afterwards.
get your own domain and use it instead of the provider's domain, this way you can easily change email providers later on.
also btw, proton doesn't support imap/pop (afaik)