We have recently been getting complaints from internal users that legitimate messages to them from outside are being rejected. When we search the proxmox logs, we often find it's an SPF issue on the sender's side.
I like the idea of SPF and if people are going to configure their domain for it...