Well, for one, it’s a protocol, so it would be like saying email is spyware. Of course Gmail, Outlook, etc. do lots of spying, but it will depend on the provider. If you go with something like mailbox or posteo, where you have stronger GDPR protections and no logging policies, then there will be less spying (not none, as people who receive your emails will likely still be using Gmail or similar)