All it takes is a hijack of any machine from yours to any of the mail servers along the way. There's a lot of trust involved in the old email system. It's been discussed for years that it's old and creaky but it still works to a point.