May be you've heard about efail paper: https://efail.de/efail-attack-paper.pdf Checkout Table 4, on page 11, to see if your setup is affected. Partial mitigation is to turn auto-decrypt. Messages can be decrypted, opened and viewed only when your detached from the net.