Thanks a lot for the advice here. That's definitely an area where we spend a lot of time and one of the reasons why we've been under a private beta for the last six months.
This point does need strongly reinforcing - that you have a free tier at all creates conditions for sharing an outbound prefix with low-reputation senders. It’s a definite barrier to adoption, and one you can only lower with an engineering-based explanation of your mitigations.