it any better if it's encrypted, but google holds the keys? it's obviously not e2e encrypted (otherwise IMAP access won't work)

If they scan it for ads, spam, and search, it has to be plain text.