Just to give more unique feedback (although everything you have is good) if your willing to self host, add immich to google photo replacements since it’ll back up photos across devices (I haven’t personally looked at ente photos) and depending on how important hiding your traffic from your ISP is, consider replacing a VPN with TrackerControl which helps to stop apps from phoning home.

Yeah, I switched to KeePass for the same reason. The only way I trust software is if they’ll show me the code, and the only reason to replace “transparency” with “trust” IMHO is because they want to go closed source. Innovation also tends to just mean 'we’re going to be charging you for features that used to be free ’

Yeah, as long as it’s not Google, it works. The real trick is to find a good email aliasing service (I use Addy.io) so when email are exposed in a data breach you can just turn it off and avoid spam. Also good for when your trying different emails out because you just have to update what the aliases send to.

I use Posteo, honestly I don’t think it matters much what you choose, anything will be better than Google, encryption is nice but only works if both people have it. Your emails will be as secure as the other address.