You could restrict the category used as mailing list mirror to staff members, and move the topics to a public, read-only category manually after a moderator reviewed the topic.
Either make sure that all emails sent to the mailing list have the same sender or change the post owner in Discourse during the moderation step.