The title seems a bit dramatic but I can see how this sort of stuff would throw anyone without a history of network or systems administration for a loop.

This is one thing I really enjoyed about setting up ProtonMail with my personal domain. They make it really simple to validate that SPF, DKIM, and DMARC are set up properly.