The best solution imo is an open and federated email proxy standard, so that others can self-host an equivalent identity protection layer.