* Enforce a DMARC policy instead of explicitly disabling it.
* Enforce a strict SPF policy instead of ~all.
* Send over IPv6. Usually stricter rules are applied and not-up-to-snuff emails are rejected at the SMTP level.
* Your provider hosts lots of spammers for their size. Consider switching.
* Enable MTA-STS.
The first two I'd consider obvious glaring mistakes. The next two are less important, but would help. MTA-STS is a nice-to-have.
I can't analyse your DKIM setup, since I don't know your selector. Feel free to send me a sample email if interested.