Service Configuration Health report shows Optimized and Need Attention for Skeptic Heuristics, Signature system and DMARC method, even if configured with the best practice.
This behavior is expected and is caused by the fact that these detection methods are being triggered by emails sent from approved list senders.