Critical
Anyone can send mail as this domain
There is no DMARC policy, so a mail server that receives a forged message from your address has no instruction on what to do with it — and delivers it.
How to fix it
Add a DMARC record in DNS, starting at p=none to observe, then tighten to quarantine.

