Specifically I’m wondering if there’s a way they can know the IP address a message originated from, without there being any proxies, gates, etc.
Yes, every SMTP relay in the chain has record of where it's inbound mail comes from.
But somebody would have to have admin credentials to each of those servers to track it back to origin.