on the whole password-encrypted email thing....it exists. PGP has existed for years and years and years. Extremely secure encryption. Basically you have two keys (pretend they're passwords for ease of understanding). One's your private you never give out, the other is your public. If you encrypt something using your private key, anyone with your public key (ie, the people you want to talk to) can decrypt it using their key. Conversely, your friends can encrypt their email to you using your public key, and only your private key (ie, only you) can actually decrypt it.
On top of that, the encryption is extremely secure....you can build in military-level encryption (a 256bit key, if I remember properly) and it's damn near impossible even for a government agency to crack it.
But no, companies rely on unenforceable arm waving rather than actually fixing the problem.
