We have to deal with spammers, phishing attacks etc. We diversify based on the actual, realistic needs of the organisation. For instance, a startup of 3 would not need to send 500 emails a day, that is a clear red flag. In practice we have yet to have a case of a user reaching those limits. Thanks again!