Everyone who can read your unencrypted traffic has the possibility to intercept your encrypted stuff. So it is really not that hard.

But you don't seem to be bothered too much about that possibility. So lets agree to disagree.