Authentication
A record can exist and still fail.
SPF, DKIM and DMARC can all be published in your DNS and still not align on the mail you actually send. “We have DMARC” means nothing on its own — what counts is whether it passes in the live headers landing at Gmail.
Presence isn’t protection.