For incoming mail, I'm hosting it all virtually on a home server. I set my MX record to my home IP address, point a CNAME of "mail.domain.com" to it. I do letsencrypt on a cert for each domain. This has been working fine for the 3 domains I've tested.
For outgoing mail, because I send so few from these domains, I'm using Amazon SES. I looked at setting up DKM to avoid exactly what the author describes about blackholing. Setting it up for multiple domains on one IP made my head spin. I might send 1-2 emails per month on these domains, so at 10 cents per email, that's quite affordable.