If you’re not using a domain for email, the MX record should not be left empty, as it can still be used maliciously.

Following a guide like this (it’s one of many) will ensure it’s not used at all:

www.mailhardener.com/kb/hardening-unused-domains