Tutanota doesn't even have an onion site. They used to, tho. Email service providers technically can never offer a secure service that you could trust. Don't use email providers for sensitive comms.