MS can't expect all their users to use DMARC, and blatantly advising their customers to do so can be dangerous. Not every domain is ready for DMARC and enabling

MS can't expect all their users to use DMARC, and blatantly advising their customers to do so can be dangerous. Not every domain is ready for DMARC and enabling it would cause undeliverable email. It wouldn't surprise me if MS was being harassed by angry 'experts' for not recommending 'hard' fail, because clearly that would be so much more secure (just look al all the comments in this topic). So I get it, advising to use a strict failure mode, even at the expense of some undeliverable email is acceptable for MS. But for those who have already adopted DMARC, the SPF 'hard' fail only increases the chance of undeliverable mail, while offering zero security benefits.