I'm puzzled that it's not the other way. Domains without MX, SPF, DMARC should not be trusted..