Domain spoofing turns your brand into the attacker's phishing infrastructure. Published and enforced email authentication is one of the cheapest, highest-leverage controls in the entire stack.
“If you don't authenticate your domain, attackers will impersonate it.”