That's an avenue I'm pursuing - have joined the waiting list and am waiting for someone to get back to me after a brief email interaction over the weekend.

Secured by work was a reference to one possible suggestion of using Alpine or similar, which requires app-specific passwords. And yes, it seems it is possible to block that!