@jamesb This is why I get so frustrated with people who dunk on email encryption. Sure, if GCHQ or the NSA is interested in you it's pretty poor. But for a simple transaction like this it'd be fine.
@edavies@jamesb in practice almost all POP, IMAP and SMTP (even between servers) traffic is encrypted, and the end user devices have a fair chance of disk encryption too.