Re: Holland was clearly making a point..
Could you mitigate this with an application-level security setting/GPO (on by default?) to BCC for corporate email clients so that you have to actively move addresses to the TO/CC field if that's really your intention.
If sending to more than three people (or more than 1 domain) then any decent client should default to BCC - and do so visually...