I’ll submit that next time I get to a computer.
I suspect it’s new accounts that are getting filtered, which is a significant proportion of my installs. A while back, mailgun started requiring credit cards; I told people to give credit card numbers. I can’t suggest a fix here (Other than use 2525).
Your logic about filtering 587 seems sound. We’ll see.