Email spoofing is possible because of how email devices are created. The consumer application assigns a sender address to outgoing messages, so outgoing email servers can not detect whether the sender address is legitimate or spoofed. You do have to switch to the pristine new email address to implement StartMail, https://emailgenerator.email/