DMARC does basically nothing. Certainly nothing that DKIM doesn't already do. Users just get phished by email that's not in their own company domain but something similar (or even completely random)