Proton also suffers from a pathology similar to the LavaBit problem. Better off using some other email service that doesn't insist on keeping GPG keys on its servers and using something like Mega instead.
Signal leads to metadata by virtue of demanding a phone number. Use the fork Session instead that doesn't have this vulnerability. Or Mega, which does audio and video calls, chat, and file storage and transfer.
Cainiao (AliExpress's shipment arm) and others will probably end up chartering planes to get customs' cleared packages to the US and then cross-ship them from somewhere in the US like Kentucky or Long Beach. Shipping costs will rise but hopefully not by much.