No offense, but given that you are making a product that has a much higher potential to enable bad actors than usual, isn't it kind of you/your company's job to try to solve it?
EDIT: Just realized I responded to the wrong person :(
EDIT: Just realized I responded to the wrong person :(
Or, maybe I just misunderstand smtp idk