Further inquiry shows that several differents persons tried to get in touch with Rainloop team regarding security issue (one qualified "high" by said person) with no answer, to the point that rainloop seems to be completely abandoned
Read more at https://github.com/RainLoop/rainloop-webmail/issues/2162