Code involving encryption is critical and also notoriously easy to get wrong. There aren't very many people on the planet who could do a meaningful audit of something as complex as Thunderbird.

Or more likely, pay someone to verify it for you!

Or more likely, use it and hope for the best...