That's very true that its no longer secure. I thought the same thing. But if they're going to send it to you anyway, they're going to fax it and its going to end up in your same Updox window. At this point its just an option for those who don't have a fax machine and prefer to email it rather than physically drop it off at the office.
In my view the important thing with HIPAA is that we do not send anything to patients non-securely. (For e.g. no patient has ever used a HIPAA cover sheet, if any, when they fax to us).