The most effective defense is not just better firewalls, but better —treating graymail as a liability, not an archive.