It is fine for emails to not be encrypted. The bad behavior is being performed by people who expect them to be encrypted. They are maybe-encrypted. If you have

It is fine for emails to not be encrypted. The bad behavior is being performed by people who expect them to be encrypted. They are maybe-encrypted. If you have an actual need for security, like resetting a password that actually matters, they must be treated as they were designed: non-encrypted, the postcard of the Internet. If you want encrypted emails, you want some other type of messenger. If you insist on encrypted emails, use PGP or something I guess.