Stupid, stupid defaults
Why does Thunderbird default to using a cleartext connection to the IMAP server? I’m actually a bit surprised it even has it as an option. Cleartext authentication might have been ok ten years ago, but it’s not ok today.
This caused my second password change this week.