I agree this is unacceptable. We are figuring out ways to make this more resilient - we host third-party domain mails, and we could map those domains directly without involving our domain. That could be one solution. We have learned a serious lesson here.