Email sending over a locked connection, so the message cannot be read on the way to the next mail server.
Like the mail carrier driving a locked truck: the letter reaches the post office and nobody along the road can open the bag.
A scanner was set to send scans to email without encryption. The mail provider rejected every message until the setting was switched to the locked option.
Which port should an app use?
Use the provider's published settings. Port 465 with SSL/TLS or port 587 with STARTTLS are the usual pair.
Every WILDCARD card exists to solve one named problem. Find yours.