Earlier quoted context omitted.
Or instead of answering my question people could just downvote me. I guess. Legitimately curious here. "Download all my mail from the mail server" is something I do multiple times every day. I guess my workflow would be verboten in corporate environments? Is it really such an odd behavior that they have an automated check for this, and it isn't throwing false positives every hour? Or is this one of those things they…
Typically this is disallowed from non company devices. If you're allowed to sync your corporate email to your personal devices, that's probably an oversight.
It's not like the IMAP protocol sends the host MAC address or /etc/machine-id as part of the command stream.
I'm really having a hard time imagining a plausible automated security system that would have led to this outcome.