Why does Gmail not outright reject SPF failures? It puts phishing emails into the spam folder (in this case, iTunes phishing).