It’s a shame he doesn’t self host an internal mail server at least with restricted outbound/smtp.

Something like this is very easy to setup with projects such as stalwart which also offers CardDAV and CardDAV (think easy synchronization of calendar and contacts without relying on "cloud").

He already has tailscale + headscale, adding in an internal only mail/collaboration server would be a win.