This only mitigates http(s). Email still points to us; looking up the foreign domain's MX records also returns the CNAME. This is particularly nasty. And, all other services of course also end up on our server. So the problem isn't just with http(s): it's with every service.