Anyone want to take bets that those senators are using OS/email systems that have security vulnerabilities bugs that will be fixed (announced or not) over the next 12 months? Do they have sufficient logging/security that they will be able to demonstrate that their communications were not compromised?

I don't have confidence that their staff don't have direct access to their accounts, their passwords are remotely strong, or they have any real OpSec. Hopefully, they have been forced to use something resembling 2FA.