Mailboxes configured with autodiscovery where the provider supports it, and a connection test you run before committing — so a mistyped password is caught at setup rather than by the mail that silently stopped arriving.
Shared inboxes without shared passwords. Subscribers are records, so access is granted and revoked rather than circulated.
Access is a list, not a credential everybody memorised.