Thanks so much for your response, as well as your work on Thunderbird/MailNews! I’m pretty sure I must be using your code every day, it’s really appreciated.
That all makes sense, I think the reason my uni refuse to allow normal IMAP is because they’re trying to enforce 2FA-only access to their systems, which could become more common down the line.