Think about what it would mean if someone were sending emails using your domain; emails your team never wrote, going to people who’d have no reason to doubt them. Or an admin quietly changed a mail policy on a Friday afternoon and nobody noticed until something stopped working the following week. Or a user account that should have been deactivated…