Linux, grapheneOS, you know, the usual stuff - don't trust, verify. 
Move email to own servers. Encryption on messages.