Email authentication as an identity check rather than proof of consent | Dead Internet Theory
Dead Internet Theory: SPF, DKIM, and DMARC can help establish that a message is authorized by a sending domain, but authentication does not prove that the recipient asked for the message or still wants it.