I manage some pretty big spam filters for national regions and hospitals and we need SPF to ward off potential phishing attacks claiming to be from our own doma

I manage some pretty big spam filters for national regions and hospitals and we need SPF to ward off potential phishing attacks claiming to be from our own domain. At the same time I do agree with the author that SPF might be harmful for the rest of the internet by vouching for e-mail from a certain sender but if you're relying solely on SPF then you've misconfigured.