What about TLS? We support it on both standard SMTP connections and for sending emails.
Our decision was to not use STARTTLS for port 25, but that's maybe not a good idea and we should allow it back: this would make both services happier ;)
In a nutshell: TLS via 465 works correctly, and STARTTLS via 587 too.
Don't hesitate if you want to weight on this, happy to discuss this further!