MTA-STS policy enforces TLS
The policy mode is enforce.
Why it matters
Sending servers that support MTA-STS must use TLS to the named MX hosts.
What to do
No change is required if every MX in the policy presents a valid certificate.
Reference
MTA-STS lets receiving domains require TLS for inbound email.