encrypted mail preferred. verify the fingerprint out-of-band before trusting anything signed. matrix and xmpp are checked at 3am, which is when everything worth answering arrives anyway.