We do a combination. We add a marker to the secure compose body (only compatible with new Gmail compose) and intercept the draft savings to prevent the drafts of the secure compose from going through to Gmail's servers.

You'll see that in the secured compose when it tries to save a draft it says "Draft saving..." "Save failed".

And un-secure composes and replies don't get blocked.