Optional, but recommended. But doesn’t guarantee anything unless both sides respect it. Also, IP spoofing is a thing.

Email is a broken protocol. There’s a great copy pasta about why it can’t or won’t be fixed, which I unfortunately can’t find. But it boils down to the fact that you can’t get everyone to agree on, or implement, the fixes necessary to prevent spam.