- Cloudflare knows current MX records for a domain
- Cloudflare has the ability to create mta-sts subdomain and TXT records automatically – just like it currently does with CAA.
- Cloudflare has the ability to host MTA-STS policy file – either via Workers or R2
I think all the ingredients are there.