After some back and forth with my email host, they sent me a cryptic "this issue should be fixed" message and sure enough, it seems to be.
I got DMARC set up (now tweaking the settings) and checked a few more things with this handy tool.
https://www.learndmarc.com/
Thanks to everyone who offered constructive feedback.