Yeah. It's not every email (I can probably count the number of times I did this on one hand). But if I feel like they're trying to bury some lead or simply want to CYA, I will try to at least download the email to the local machine (perfectly legimate) and BCC myself (Grey area) as an immitation of 3 backup strategies. I've never had to utilize thar BCC, fortunately.

But yes, phone screenshot is another strategy with much less grey area. I'm just becoming more and more paranoid of some potential defense trying to accuse my photo of being doctored, especially with more and more AI tools available.

It’s no different than using IMAP or POP3 to download your messages. This is the beauty and curse of email. It’s sometimes too transparent. I prefer it.

Screenshots are trivial to forge. It is impossible to forge email that has passed through a server with proper DKIM setup.

At least on office365 internal emails aren't DKIM signed.