Why do you say part of the IMAP/POP3 transactions are not secure? In web I can understand that some sites use https and some dont. But once an email client connects to an IMAP server using SSL, wouldn't all the transactions remain encrypted until the connection is closed?