Is there a permission to limit / manage the 'from email address' in the user preferences?
Ideally this should be a controlled field - doesn't seem right that there are no controls for a system that has been setup with DKIM on the domain and users get to elect which email to send from.