The design with multiple domains is pretty annoying.
So I register bob@tutanota.com but forget to register bob@tutanota.de and anybody can squat it and impersonate me from the same service?
Not to mention they blocked my IP after registering 3 of the 5 available domains.