The AOL part was Mark click-baiting us. The actual article just says "private email account" and that the level of encryption is "not known." If she paid for her own hosting somewhere etc it might have been very secure, not that it wasn't still an error on her part.