I am considering signing up with a low-cost SIP provider which, according to a current white paper, does not (yet) support SIPS (Secure Session Initiation Protocol). I understand that this means that my SIP user name and password will have to be transmitted unencrypted over TCP whenever my soft phone registers to this provider.
Is this a red flag or a restriction that is fairly common among other (well-reputed) SIP providers as well?