You have to trust that the plugin does what it is supposed to when you set it to use SSL (SMTPS) or TLS (STARTTLS).
If you are worried about your account password moving around the Internet, create an account at Gmail, Hotmail or Yahoo and switch from passwords to OAuth 2.0. OAuth 2.0 access tokens are changed every ten minutes and are easily revocable.