You pretty much answered your own question there :)
Get-QADGroup -GroupType Security -GroupScope Global -LdapFilter "(mail=*)"
We might consider a better field to check on that mail to figure out if they're mail enabled, perhaps legacyExchangeDN.
Chris