Companies are more worried about this than they probably should be.

The average enterprise network is nothing like as secure as people behave like it is.

Where do you think your email is hosted? With few exceptions I'd expect its provided by a cloud provider these days.