I use protonmail with their family plan, it’s not terribly priced when you consider it comes with calendar, vpn, and drive storage as well. The biggest annoyance is probably that you have to use their mobile apps due to the encryption and they are not the greatest, but it does encrypt everything which I find outweighs the forced use of just their app.
I would recommend prowlarr instead of jackett for indexer management, and pihole as at least an additional blocking service but in reality it’s really all you need for use at home. I’d also strongly encourage use of a VPN on your *arr download services. I use a separate box to run Plex and then have my *arrs all running on their own VM inside if it to provide separation and allow be to more easily segregate the network traffic (as someone that doesn’t really know docker that well it “just works” for me. Also probably worth looking at how to store your media on an external target, it’s easy to quickly accumulate 10s of TBs of media and trying to store that all on the server locally is asking for trouble. Better to set everything up on a NAS to start.