If that is a security risk, then they ought to make the mail unconnectable outside their own network and demand VPN usage. You cannot blame the person for a poo

If that is a security risk, then they ought to make the mail unconnectable outside their own network and demand VPN usage. You cannot blame the person for a poor security setup within his organization.