Hacker News Reader

I would always treat emails like they are readable by anyone at any time regardless of permissions.

Yeah, this. They are sent and stored in plaintext.

It's like if you write all your correspondence on postcards (no envelopes) and then wonder if the mailman can read your mail.