Not every failure comes from a mailbox provider's filter. Some messages never reach a provider at all, because the recipient's domain publishes no mail server, or the server it publishes will not answer. These are usually the cheapest failures to fix, and in our own logs they outnumber every policy block combined.