Incoming email stopped working for private categories: Email::Receiver::InsufficientTrustLevelError

I have several reports that the setup using a support email address going to a private category stopped working even when “Allow email from anonymous users with no account” is checked.

Apparently there is a contradiction between:

  • an existing user sending an email to that address, when they do not have access to the destination category
  • an unknown address sending an email to the destination category

Both should be working, but in one case, the email is rejected with: Email::Receiver::InsufficientTrustLevelError

This is quite annoying since it used to work!