Sender address rejected: not owned by user

There’s some discussion here: Admin accounts should be permitted to send mail on behalf of other users

This is a pretty important setting to prevent your users (or a malicious actor with access to a user account) from spoofing each other. Can you just have your clients supply the correct auth for the account when sending?