I’m going to test this, thank you for the heads up. I then need to check the code and see exactly how it works without this setting, because indeed email impersonation is not something likely to please me. SPF and DKIM should be checked for that.
What else do you need to know? Maybe we can move to private 