> but you do know the "From" address in standard email is utterly meaningless from a security perspective right? That would be the argument as to why the doma

> but you do know the "From" address in standard email is utterly meaningless from a security perspective right? That would be the argument as to why the domain owner would have a duty of care when also using the domain to send legitimate business email. Again I'm not saying there is a duty of care here, I'm just saying that it's not obvious to me that there isn't one.