Re: where's the unsend button?
I used a home-brew mail system once at my university that let you unsend a message -- but only if it was still unread. As soon as the recipient opened a given message, it stopped being retractable.
(Not network mail; this was strictly iintra-mainframe.)
I believe the implementation was fine -- no corrupt mailboxes, missing messages, or whatever.
As for the policy -- well, I'm curious to hear what people think of the idea in principle (leaving aside the practical issue that implementing it in a network context would be highly infeasible.)