I wrote about these concepts, and have lived with my system since 2004:

https://www.vsta.org/spam/Traveler.html

(Ancient formatting, use reader mode if you're in Firefox.)

tl;dr Mail is broken because there's no authorization. Make your address act as an authorization token which is (1) transitive, and (2) revocable.