Currently the credentials for the email server used to send notifications is a simple id and password for authenticated SMTP. I use G-Suite for my domain’s email and support for less secure apps (such as this authentication method) is being withdrawn.
I’m therefore hoping that email server authentication can be enabled via oauth2.