The author of this ticket isn't exaggerating when he states that "MITMing this crawling horror would be no more difficult than a plain, unencrypted TCP connection".
Download is easy enough, just click the transfer via usb option, and it'll download a .azw file. You can't read it without stripping out the DRM first, but that's not very hard either.
That's how bad it is.