Reply to comment:

user_testing_IPv6
MS guys, you forgot to include your ipv6-enabled Azure email servers in your SPF record @microsoft.com!