They shouldn't send marketing mail from an address they want to be read. I think that's been the standard for a while, in practice - most actual transactions come from orders@<blank> or something similar while marketing mail comes from a dozen other addresses.