Anyone can send email from your domain. In most cases, unauthenticated emails aren't rejected by the server that receives them. Without the right protection, it's almost impossible for recipients to tell if that email in their inbox legitimately came from you or not.
