It looks very similar to Slack / Discord.

However, if an org needs email, why can't they just configure their filters to move everything from outside the org in a special folder, and email server could further filter any link and put it through a warning page before redirecting to the link.

We already have DKIM and SPF to verify if the domains of the sender. Just setting up these can work.