Agencies should turn on MTA-STS to stop emails being transferred unencrypted between servers that support it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.