@cadey (basically: Sendgrid used to not do domain control checks at onboarding and allowed the same domain to be in multiple accounts, so any spammer could sign up and send e-mail from any Sendgrid using domain which passed SPF)