According to this article:

*”If your DMARC = none, it cannot protect your domain against cyberattacks. Attackers often exploit the p=none policy to impersonate domains.

Over the years, several domain owners have reached out to PowerDMARC, explaining how they are being spoofed even with DMARC implemented. On further review, our experts found out that most of them had their DMARC policy configured at “none”.”*

I am still trying to learn the basics of email marketing.

Can someone please explain in layman’s terms how this can be possible if the attacker doesnt have my smtp credentials or access to my DNS manager/registrar?