Yes and know. The implication of it being an "unsecured email server" to me sounds like they spun up a VM for some reason instead of using Exchange online.