Using email is NOT the problem.
The problem is a private server that’s NOT secure AND handles top security information.
The use of a private server in a deliberate effort to avoid FOIA accountability and evidence preservation requirements is certainly no small problem.
The classified information stored on the unsecured server is, or should be, an even more significant problem.