Email was not designed with security as a requirement. In fact, all "security" that involves email was bolted on after the fact. Here are four areas that were bolted on that should be part of your secure email basics.
Utilize MFA, for real
We have beat on this drum for over five years now, and people are still not using it.