Up to now there haven't been any official restrictions at my org. I have two users out of about 70 who get spammed because their email addresses were compromised in breaches where they'd registered with their work accounts, but fortunately that's the worst of it.
It seems that the standard...