Comment by delroth

And downgrade attacks are mitigated by MTA-STS: https://www.hardenize.com/blog/mta-sts

Not supported by everyone just yet since this is a new standard, but Gmail at least supports it.