Comment by cromka

Not really, no. HTTPS was used, except for log-in only. But cookies traveled unencrypted, so you had access to the account anyhow.

And not just GMail, this was virtually every service out there. From a perspective, it's laughable how bad security was back then.