Payslips should remain private and accessible to only the intended recipient. However, email is inherently a comparatively insecure environment.
Requiring recipients to open payslips with passwords would go a long way to resolving this problem.
PS I have lost one client because Accounts Hosted does not have this feature.