Good idea in theory, but this part:

```To prevent theft of correspondence (in the event of a compromised account or server) the messaging service must store only messages that have not yet been delivered or returned as undeliverable.

Where archiving is required, the service should encrypt the traffic of designated accounts with a public key, and forward it to a write-only archive service.```

This is a silly default behavior. For enterprise I guess it makes sense, but I want to keep my mail local, not shuffle it off to Yet Another Service™. And I certainly want it to SAVE my mail and not delete it by default!