To limit the use of cousin domains in the From header, a method is to ensure all the domains presents in this header are emailable (ie the domain has a MX, A or AAAA record). It does not stop all the cousin domains attacks, but at least ensure the cousin domains used are present in the DNS, offering some form of traceability.
Option should be OFF and recommended to be ON.
Likely needs to wait for a later release since the From: parser can only handle single-value fields at the moment, and the DNS stuff will need to be handled carefully so that it doesn't step on what libopendmarc is doing.
Planned for next major release.