The thing that made me say "that's enough, I'm out" was the filtering rule constraints: only one value per rule, no conditional AND/OR, lazy link to MDN doc about regex.

(Again, filtering encrypted mail is very, very hard)