Pretty sure substack uses mailgun. If you dig substack.com for mx and txt records you’ll see that their spf includes mailgun and their mx records point to the same as well.
Their business is not sending emails, and until it becomes cheaper for them to DIY it most companies will outsource stuff that doesn't give them a competitive advantage.
