This is partially correct, TLS comes into play for email authentication, however the body of the email is still transmitted in plain text. To encrypt the body, you need to use certificates with public and private keys and share the keys with the person you are communicating with. Not easy, but not impossible.

Same thing for SMS as you mention CDMA and gsm authentication is encrypted but the SMS body is not.

You can build your own stingray if you have some time and knowhow and see what all your neighbours are talking about. Its for this reason the app Signal abandoned SMS message transmission, they didn't have a way to secure it in transmission and didn't want to mislead their user base. That said it appears that Signal was either created by or endorsed by the CIA as they have the encryption keys and thus can read any message sent thru the system.

There is very little privacy in any kind of message transmission anymore.