The charitable explanation (steel man) is that this is simply the web catching up to email. You can use DMARC, SPF, and/or DKIM behind the scenes to validate an

The charitable explanation (steel man) is that this is simply the web catching up to email. You can use DMARC, SPF, and/or DKIM behind the scenes to validate any third party you’d like to send (cryptographically verified) email on your behalf. Is it so insane to allow a third party to serve web pages for you? I am pretty skeptical, however, given the way Google will (ab)use this.