Reply-by-email can post comments after the sender loses access

Lots of apps let people answer a comment notification by replying to the email. The inbound handler...