Mail admins had 20+ years to fix config.
Not saying that outlook is properly config, but it’s well overdue using solutions designed to reduce spam.
DMARC does basically nothing. Certainly nothing that DKIM doesn't already do. Users just get phished by email that's not in their own company domain but something similar (or even completely random)