what is the problem with SMTP about security?

the protocol is unencrypted

provides no protection against sniffing or hijacking

the protocol can be protected

if used with a VPN or similar technology.