> that don't implement both SPF and DKIM

I don't see how that's related at all to specifying report addresses in the DMARC record.