they likely have the capability to trivially decrypt TLS

Whoa. Anywhere to read more about this? Had not been paying close attention, didn’t realise that was so starkly the case.

One thing that would be useful to understand is the distinction between CMR and SMR

Big fan of that one, been using it for years.

I’ve enjoyed runbox.com for years but don’t think they offer catch-all, at least not when I last checked. You might look at mxroute.com, I heard about it later and might have gone with them first and they somehow seem more likely to support that