That could be it, maybe. However, if they provide a paid product with a contact form, they should:
1. Support the paying customer instead of passing the job to volunteers.
2. Provide a contact form that works over HTTPS.
Do you have any trouble with other contact form plugins, like Jetpack's Contact Form module or Contact Form 7?