A user agent SHOULD NOT send a From header field without explicit configuration by the user, since that might conflict with the user's privacy interests or their site's security policy.
The word "agent" implies that they should _only_ act on your behalf.