Comment by jasonjayr

Modern IMAP servers support OAuth2/OIDC, (Thunderbird supports this dialog) and IMAP/POP/SMTP has supported kerberos since forever (Though that typically is only within a pre-setup organization).