Any mail host carries the risk of a privacy breach, either accidental, such as a hacker attack, less so, such as selling the service to someone who cares less or completely on purpose - simply turning around and selling your data.
All of these scenarios are vastly less likely to happen for Google in my risk analysis.