Normandy is a user on niu.moe. You can follow them or interact with them if you have an account anywhere in the fediverse.
Normandy @Normandy

Really sounds like the vulnerability for PGP is really more akin to XSS more than anything. So email clients that only understand plaintext should be fine.

That also mean utilities like pass should be fine

@hikerus admittedly I may have skimmed that paper and could have missed something.