"... While Yahoo still has a way to go in the other Who Has Your Back categories (and they remain the last major email carrier not using HTTPS encryption by default)..."
This is what I'm so confused about. 6 years ago they realized they would need to protect their customers from prying eyes yet they couldn't wrap their heads around encryption being a major player in that system? I'm not buying it.