I think I've only ever seen this from banks or medical organizations, where the annoyance is a little more acceptable.

I'd much rather they send me an (encrypted) e-mail, but I understand why they can't.