The replacement had to be open source, secure, no metadata leakage and as easy to use as email is today.

This actually sounds a lot like BitMessage [0], although it's not completely trivial to setup, since you have to setup a not so user friendly address and such.

[0] https://bitmessage.org