I'm the sysadmin at my company and we regularly get emails spoofing our own addresses! It's wild that Microsoft can't even protect customers when they have all the info to do so.