Category > Security > Permission type > Author-only

So set up incoming emails to trigger this. Someone emails support@example.com and they come through as group PMs to the support group in Discourse.

That’s what we do.. it’s exactly what you are describing so I am not sure why you are resisting this.