[toast0]

Back when I ran email for a large sender, I turned DMARC reports off once I got things settled in, and might turn it on to debug issues.

There was nothing to do about the reports most of the time. Just get mad that people are accepting spoofed mail that fails DKIM and SPF.

But mostly, the phishing campaigns with our branding just stopped spoofing addresses. Turns out, lots of email clients don't show the sender address and people who get a phishing email about Service Y from [e-mail] may get phished.