I thought SPF was more "this email is allowed to come from these hosts" authentication which tells you nothing about the sender (to me, at least) other than "th

I thought SPF was more "this email is allowed to come from these hosts" authentication which tells you nothing about the sender (to me, at least) other than "they used an approved host"?