That policy of theirs has existed for a long time now. It's a really odd one at that.

They also don't enforce DMARC, nor do DKIM. It's stuck nearly four decades in the past.