The combination of StartTLS and PLAIN is safe for your client.
According to the manual, the server offers both PLAIN and LOGIN authentication methods over secure connections. StartTLS is considered secure and is available on both ports, 143 and 587. You can refer to more details here: NS8 Mail Client Configuration