I enforce strict spec and behaviour compliance, as well as policies (SPF, dkim, etc). Aside from a very small number of well known spam/abuse sources, it's largely from legitimate mail accounts on Gmail/outlook etc. or idiot msps.