By default SMTP offers very little protection against interception. Traffic may be encrypted between servers but there are no guarantees.
And how likely is it that the attacker actually owns one of the servers that is a hop on the way from mail sender to mail recipient?? Seems extremely unlikely.