enable connection security by default
After adding a POP/IMAP or SMTP accounts, connection security is disabled by default. That's bad. Please enable STARTLS or SSL/TLS by default.
Most mail providers support SSL these days. People really should feel encouraged to use it.
At the same time, "check for new messages on startup" (#6336 (closed)) and "check for new messages every 10 minutes" (#6337 (closed)) is activated, which increases probability to send login data in cleartext.
And also please prevent people from shooting their own feet, i.e. people who forget to look through all options and giving their passwords to exit nodes.