I've been running email servers since before there was email spam and this is *so* true.

Anyone who has ever had to configure a non-trivial SPF record knows it's true.