As stated, absolutely. He qualified it with a "personal email address". Saying "Oh yeah, I could read the president's personal email" is just playing up the impact of the program by throwing a high-value name behind the assertion. The information there is that they can read personal email; the president's personal email isn't more technologically protected than anyone else's given the same provider.