> Unless this was in the early 2010s the email provider was probably using TLS

It was the mid 2010s yes.

And they’re not going to abduct and torture and American citizen out of the blue. The more “intensive” methods are higher cost, the intention is just to increase the friction involved with engaging in the routine and scalable, ordinary forms of snooping.