Block an email domain across all tenants

How is that we still cannot block a malicious email domain for all of our tenants at once? After all these years. What a critical function that doesn't exist. Reflexion had this functionality. Sophos bought Reflexion. When bad emails slip through (happens a lot with Sophos Email; Gateway) I have to manually add that domain to each tenant's block list. And as fast as possible if it's an especially clever/dangerous email.

Yes, we also report to

Come on Sophos. Do the work.