At this point, I would be willing to penalize sites with bad SPF records (syntactically invalid; more than one different SPF record attached to the same domain, etc.) Those people really deserve penalties because they've messed up.
I would not be willing to penalize sites with *no* SPF at all just yet. Maybe eventually. Regards, Dianne.
