>Its not the files being transmitted themselves that are at risk, but the actual web site. The ftp transmission has the login and password for the site and these are easily picked up by those who do these things. If the site is used for more than just a depot for files this can lead to a great deal of trouble.

I have a just interest in security. They created a shared folder for our application updates. It has it is own login and password (over-complicated one at that). They feel safe enough, and so do we.