It is true that forwarded mail has traditionally been an issue. However, there are two variables to consider:
- ARC (Authenticated Received Chain) was recently created to address the authentication issues caused my indirect mail flows.
- When leveraging 250ok's observation mode, you will be able to actually see the impact of moving to a reject policy. Often times, the impact is overestimated and the actual impact is negligible/non-existent.