Their "customer support" includes not expecting users to set up PGP to communicate with them. Email is not a secure method of communication by default.

It's fine to send a notification instructing them to visit the secure portal for more info, though. Hence, no-reply.