A vendor asked us to “add a quick DNS record for them”:
TXT _dmarc v=DMARC1; p=none;
Basically, this says “turn off all of your domain’s anti-impersonation features so that any phisher can trivially trick your customers and employees”.
Nope. Time to find a new vendor.