Use an internal ID that does not directly identify the person. Hashing an email is not blanket permission to send it anywhere; distinguish dedicated user-provided-data features from the ordinary user_id setting.
Set the dedicated user_id field, for example in a gtag config call. The official gtag set form is also valid. Putting user_id inside user_properties is not the same as configuring User-ID.