Its encrypted at rest, so good luck, but you still have to worry about this from your provider. You have to also worry about if they would even tell you if they knew that was happening, and you have to worry about what they are doing on top of that.

I have a single layer to worry about, and likely going to solve that with moving the mail storage to a home server and only having the postfix mail-exchanger in the cloud.