Kind of, yes. From how I understand it, Authentication (SPF, DKIM, DMARC, PTR, et) and Reputation (Good domain & IP score) just informs ESPs that you're who you say you are and you're not abusing their network.

That problem is easily solved with client-side whitelists (ala hey.com). However, that would also mean the death of all "legitimate" marketing emails. All the hoops you have to jump through are there either as a form of identity validation (which is fair) or because the industry wants to allow SOME unsolicited emails through.