The instructions you see above come directly from the Governor’s office by email to somebody on our team a month ago. They are the instructions that are used for sending support letters and they have been used for multiple years by people who know the governor’s office well. They are also used by other organizations for other bills.
I was also confused when I saw that line on the website, since it contradicts the specific instructions and also because it is on a page that does not have an email address. (Why would the Governor’s office give people instructions for sending emails on a page that does not list an email address? It doesn’t make sense. That’s why my hypothesis is that the word “email” is a misnomer and it actually refers to the contact form on that page, which does not have a place for attachments.)
I agree with you that it seems like a poor security practice. But I err in favor of following the explicit written instructions provided to us by the Governor’s office.
We have reason to think this is not true in this particular case. It can definitely be true in other cases. See my previous message about this.