Gernot Starke has a post on security-related issues with hosted services — I couldn’t agree more. This is precisely the reason I don’t use GMail for anything work-related.