said by dave:
POP and SMTP *can* use secured connections but it's not mandatory in the protocol...
Yup. POP/SMTP are plain-text (including passwords) protocols. Many providers now allow it over SSL/TLS (encrypted) connections but some don't.
Most hotel/hotspot Wi-Fi is unencrypted so users using POP/SMTP over that show everything to anyone looking.--
Don't feed trolls--it only makes them grow!