This IMO shouldn't be done more securely. It should be considered fraud.
it was most likely for her team, which would explain why she was doing it.
Every organization sets up something like this once they grow past a certain point.
so do you have some kind of inside knowledge about what happened? if so can you give more details about how exactly she improperly used an executive's email? what did she send and to whom, i wonder. and if you don't have any inside information, could you reflect on what motivates you to defend openai here?
They are likely not sending out recruiting emails. They are helping get people onboard to staff their own team or org.