Phishing campaign spoofs Microsoft domain. Is lack of DMARC to blame?

The campaign, according to a blog post published by Ironscales, uses a lure that suggests the recipient has important email messages that have been quarantined, and must click a link to salvage them.