I wonder if the default policy shouldn't be rejecting all email unless DMAR/SPF/DKIM is set up. I mean, email clients already mark non-authenticated emails as d

I wonder if the default policy shouldn't be rejecting all email unless DMAR/SPF/DKIM is set up. I mean, email clients already mark non-authenticated emails as dangerous, that helps.