@ben it's interesting how often such "advice" boils down to "just deactivate the security measures and you will be fine".
Nonetheless, maybe DMARC might be another blog post topic for us to look into. Even if it's just a nice reference to point people to when there are misunderstandings or open questions.
After all, our last two blog posts both were created after receiving the same questions over and over again.