Does rspamd only check outgoing emails from websites with the Email Role enabled? Or, does it monitor all system/website-level emails for spam as well?
It checks everything including website generated emails. You can also rate limit these messages under "email settings" in the UI.