> DMARC policy is best avoided unless you're a bank, or other brand
> that is concerned about phishing of your customers.

or have a domain that spammers use as the from/reply-to address