I&#x27;m not sure I buy the reasoning on &quot;surface area&quot;, at least not the specific comparisons in the article.  It seems unfair to count Chrome but not Unix.  For that matter, shouldn&#x27;t we count the surface area of everything that touches the email as it hops around, including routers, etc?  And isn&#x27;t that the whole problem with email that the protocol does not require secure transport?  So, seems like the only way to make that even vaguely secure is to use PGP (or something) on top, in which case who cares about mutt...