And to be fair, configuring most clients to retrieve and then delete, or keep a local copy in addition to the server one, is not difficult at all - these options are not hidden or anything.
In case the password leaks, attacker can only fetch new messages over POP3, and not plant them or fetch the entire archive from the server. (yeah, I can fetch and delete over IMAP too, but then what's the point of all the extra unused complexity of IMAP, it's just an extra risk)
Considering you have to download the entirety of the mail contents to read it anyways, I have no idea what makes you think this is an impossibility.
With IMAP, when an email gets deleted by some client, other clients will also delete their local copies of that email. That won't happen with POP3.
But I haven't read either of the two protocols, so I'm not sure whether that's something required by the protocol or just a common behavior of clients.
This is not an IMAP feature, this is a client feature. There are plenty of clients that don’t sync deletes, if you don’t want to.
Or, just don’t delete your emails? If you delete a POP email from your client, it’s also gone for good.
This isn't IMAP limitation, this is how clients implemented it. Nothing stops one to download every message over IMAP and never delete them.
And one big advantage - it actually allows you retrieve and store e-mail locally - irrespective of any server allocation.