A state I don’t live in is trying to come after me for back taxes I don’t owe.

What’s better, emailing my old tax returns as plain unencrypted PDFs (per their request, when I pushed back I was told their security team “advises this”), or bringing the papers in myself?

For both options I have little confidence they will dispose of the documents properly. Surely there’s a better way?