I'd argue that this:
Basically they sell you the peace of mind, not really any actual security as far as anyone can tell.
Is demonstrably false, as their encryption methods for emails at rest as well as other options (PGP) are tested. They're also upfront with their threat protection model ("the ProtonMail threat model document specifically states that, “we cannot guarantee your safety against a powerful adversary.”) and as far as coming from Google or another free provider is concerned are a definitive step in the right direction. A good overview if OP is interested is this writeup here: https://www.techspot.com/news/82776-protonmail-review-secure-email-really-secure.html
Personally I'd be hesitant to recommend self-hosting email unless really necessary (since that has it's own risks/threat model) and think OP would do well to start off with Tutanota or Protonmail.
As an aside if we're alluding to Protonmail being a honey pot with the Hong Kong riots I'd rather see it stated as such; this is the second place on Lemmy I've seen such criticism levied when a company that has a privacy/security based product and did a statement on the protests and I don't find it that suspect that they would be interested in furthering their brand or "putting their money where their mouth is" by coming out in support of anti-censorship/CCP measures.
Is there any more information beyond the gitlab page? RedReader was my go-to when I browsed Reddit a lot (not as modern looking), is this using Teddit links or further anonymizing? Otherwise Reddit still gets your IP, so where are the extra measures taken?
Installed and checked my DNS app, it still used Reddit links and the associated trackers from what I could tell.
I do like the look of the app, and the layout of the license page is nice but I wish the information on gitlab was more forthcoming.