Tuta, the service formerly called Tutanota, encrypts more than the body of the mail. Subject lines, the address book, and the calendar are encrypted with the product’s own open-source scheme. The company is in Germany. You can pay without handing over a name. Newer accounts get a post-quantum layer on Tuta-to-Tuta mail.
That custom cryptography is why mail to a normal inbox is awkward. OpenPGP for outsiders is limited, so the strong path is both people on Tuta. Search inside encrypted mail is still weaker than Gmail, because the server cannot read the text to index it. German law is real law. Encryption of the mailbox is the protection, not the passport stamp.
Use it with people who will also use it. tuta.com
Tuta’s post-quantum option applies to its own encryption, not to a message you send to a Gmail address. Those still travel as normal mail. Search is weaker because the server cannot read the mailbox to build an index. Aliases exist on paid plans. If your group will not all move, you will live in two inboxes. That is the real cost, not the euro price.