Your service doesn’t validate SPF. An invalid SPF (eg too many DNS lookups, invalid syntax) will result in all passes but creates a security risk.

Yes, from a marketing perspective this is fine. But you should warn about it.