DKIM is... not foolproof. It does not stop attackers from faking the visible "From" address. Which still works as phishing vector.

Hey Siri, I get a lot of Docusigns because I'm a lawyer. Check my domain DKIM status please.

There's no spoofing involved. DKIM would do quite literally nothing.

Is the joke