All of these have the same problems. If the client encrypts, then the client can be subverted. With webmail, the client is downloaded every single time, and thus can be subverted on the server.