Well, the questions all in the thread title really.

It would be ideal from a security POV not to have modest download mail from every AP on my device.

Would it be possible to only allow modest to update from say my home and work connections.