There are plenty of secure options to use for mailing. Though having your mailserver under your own control is step 1 they skipped here. I tend to find it sad

There are plenty of secure options to use for mailing. Though having your mailserver under your own control is step 1 they skipped here. I tend to find it sad when (tech, and specially security/audit) parties don't (if they can't or don't want i don't care so much about) host their own mailserver and simply house it at google or similar party. Actually while writing it, it should be slightly embarrassing for them, a security, auditing company they can't even tell what actually happened with their email communication.