The article includes a header-receipt replay that shows how those lanes can agree or conflict.
The visible sender is a claim
A display name and From field can be useful, but routing, authentication, return path, reply behavior, domain history, and account context test different parts of the story.
Authentication is not authorship
SPF, DKIM, and DMARC can support domain-level handling. They do not prove which human wrote the words or whether the request is legitimate.
Slow the consequential action
When payment, credentials, private information, or urgency are involved, verify through a known phone number or established workflow outside the message.