You’re spot on! Arca encrypts emails locally, and you hold the keys. This means even if servers are attacked, your data stays secure because only you can decrypt it—unlike ProtonMail, where they manage the keys.