if they use the email/smtp protocol then it's email.
plaintext password does not enter their system. For example I still have to enter a second password for the in-browser decryption (although these days they use the same password). Most of security feels like theatrics, but small measures that add difficulty for a potential threat actor add up.
plaintext password does not enter their system. For example I still have to enter a second password for the in-browser decryption (although these days they use the same password). Most of security feels like theatrics, but small measures that add difficulty for a potential threat actor add up.