It's sent using an SMTP mail engine using SSL as well, but not TLS. How secure is this message?