> You can set rate limits so an agent can only send or delete a few emails per hour

Nice idea, but it will not work. Agents are so resourceful and determined, they will find that weird call which can delete all emails with one request (/delete?filter=*)