I feel like you’d get this with the Protonmail Bridge. It acts as it a email provider on your local network, and handles the encryption stuff itself. I believe Thunderbird sees and stores the email it sees through that as plan text.

https://proton.me/mail/bridge