Setup a Postfix outgoing BCC based on SMTP username (not sending email address)?

You may use reject_sender_login_mismatch to force match between smtp auth and envelope sender address. It may deliver solution acceptable for most situations.