While there is always a risk that emails can be hacked, the same can be said for phone calls, and even in-person visits to a counter could be subject to an impostor.

But, unless you are deliberately using a non-secure email system, pretty rare these days, I don't see the security issue. That is particularly so as to the physical address associated with the account or the last four digits of the credit card.