Codeberg for public repositories, cgit (if that even counts) on my own server for private ones

I personally use Claws Mail.

No support for Monero despite it being requested on uservoice 6 years ago. A Bitcoin wallet (seriously?) which is easily traceable. Important email metadata is also not zero access encrypted (i.e., subject headers, from/to headers) which leaks a substantial amount of information even if the body is encrypted. Not to mention they had clearnet redirects from their onion service a while back, something a lot of honeypots usually do.

Even if it’s not a honeypot, you’re sure as hell not getting any privacy with Proton. That’s for sure.

Well, I disagree about Signal. Proton however, I agree is extremely shady and should be avoided at all costs.

I’m not a fan of GrapheneOS, but the point they bring up here is valid. There is already proprietary firmware on your computer. There’s no reason why you shouldn’t be updating it to protect yourself from serious exploits. The FSF takes an ideological stance rather than a practical one, unfortunately.