Does anyone else find it strange that AA would even suggest to send them your CC info via email?

Granted, they give the fax option, but I don't think I have ever seen a suggestion to use an unsecure means for CC info from as large an enterprise as AA is.