How many IP addresses does your SPF record actually authorize?
Every guide says a broad SPF record widens your attack surface. Almost none of them says by how much, and the arithmetic is harder than adding up the ip4 ranges. Here are the four ways a naive count lies — worked on real ESP records, resolved and counted rather than remembered.