Why smtpify365 requests it
The service submits the client MIME message to Microsoft Graph using `/me/sendMail`. Microsoft lists delegated Mail.Send as the least-privileged permission for that operation.
What the current app does not request
The implementation does not request Mail.Read, Mail.ReadWrite, Contacts, Calendars, Files, or tenant-wide application Mail.Send. User.Read and standard identity scopes identify the connected mailbox.
Sending still follows Microsoft controls
Mail.Send does not bypass mailbox sending limits, Exchange Online processing, anti-abuse controls, recipient filtering, or tenant policy. Graph acceptance is not proof of final delivery.