Par for the course, "security" industry people, especially the higher ups rarely make an effort to secure their communication.
The best you can hope for is they likely use Signal, good luck getting their contact details or verifying keys with them though!
