The mailfrom field and others are set manually.

I can send you a mail from what ever sender you want. The mail protocol is based on trust.