You can now block or quarantine inbound emails from domains that do not have an SPF record.
Additionally, if you have known/trusted contacts that send email from or through mail servers whose domains have no SPF records, you can create exemptions for these senders to allow their mail through while still blocking mail from other mail servers that do not have SPF records.

Configure on the Inbound Settings > Sender Authentication page.

Learn more