It's a bit surprising that he got anything through without SPF and an MX record. That seems to be the minimum to get mail into the inbox for a new domain at least, so his domain probably had some positive reputation at one point.
I agree an SPF record is an expected minimum but "use a big provider" is more relevant ime.