a final reason for this being important is data protection... our clients may have a medical related legal case with us that our guys on the delayed flights team should not be able to see...
while i can set record permissions in the custom module, we can't control the flow of email, therefore communication with the client is public regardless of the content.