FastMail has an admirable bug bounty.

Have its privacy claims ever been independently audited?

https://www.fastmail.com/bug-bounty/

I stopped reading their privacy policy at "Fastmail is an Australian company" - Australia is a five eyes jurisdiction. That said, I'm a happy customer of almost a decade with them, but my email correspondence is pretty boring and not politically sensitive.