I think a difficult password should be fine especially combined with MyKi or another 2FA authenticator.. but I just like having a PRIVATE email that is not subject to scan and surveillance so I use: https://protonmail.com/ (they have a free account if you don't need several emails). I basically redirected anything PRIVATE to my Protonmail accounts and let Google and other emails be for mail that are not that important.