SPF flattening is difficult to get correct and then you have to check it every so often to update it.

DNSControl automates this. https://docs.dnscontrol.org/language-reference/domain-modifi...

(It’s open source)