I do think the SMTP pattern of assuming local domain unless signified to remote is a viable middle path solution.

Authentication of local identity / users across distributed authorities / domains - the problem that keeps giving. A/B testing of risks and efficiencies of centralization playing out in very real time.