@nielsk do they validate certificates?
I reported similar stuff when I got my Nokia N97 probably around 2010. Was confusing that I didn't get a warning when setting up mail
This is a man in the middle, and should be treated as a vulnerability! Shame on them!