I was responsible for third party e-mail clients able to connect to Exchange, it was decided Thunderbird was allowed and support was implemented. It can be done if people are aware of the needs, can implement it securely and can evaluate risks.