Trojita defaults to plaintext SMTP, when a new account is configured. This should be changed to implicit TLS on port 465. Furthermore, when a plaintext connection is used, Trojita could warn the user in this case that this is not secure.
Trojitá is no longer maintained, please switch to a maintained alternative like https://apps.kde.org/kmail2/ Sorry for the inconveniences.