This is also incorrect. Reporting (rua/ruf) are optional.
> if you don't have a policy of "REJECT" set on your domains, DMARC isn't doing you a whole lot of good.
With "quarantine" failing emails will go to spam, which is plenty good enough in most cases.