I never thought about it before but is it possible to limited what sites can send out email? If they have a script installed it will just envoke sendmail via localhost and has nothing to do with the mail relay settings?

Just wondering if anyone knows how?

You would need to look into sendmail's documentation

You can disable scripts on a per site basis of course - but at basic level that would mean all scripts.