To make mail sending more secure. Is it possible to create a device-specific SMTP one-time password for only one or client connection?
Are you authenticating users with postfix and have sender & access restrictions in place? Do your client(s) have a static IP address where you could restrict networks?