This is sadly true. I cannot connect to my school's e-mail service with either of the security schemes provided by Thunderbird (SSL, TLS, or STARTTLS). The trade-off is a nice program versus a secure connection.
I'm not exactly concerned about the security of my school account, but it could potentially suck to have it compromised.