I feel like it's only easy if the organization has no clue what they're doing... If a standard email interface allows easy slipups of sensitive data in that man

I feel like it's only easy if the organization has no clue what they're doing... If a standard email interface allows easy slipups of sensitive data in that manner, you definitely shouldn't be using an unmodified interface.