SPF and DKIM are now more commonly implemented correctly by spammers than by major email providers.
https://news.ycombinator.com/item?id=43468995
Yes, but they are still effective at preventing spam from spammers who are pretending to be others.