I'm try to understand the benefit of the HELO Identity defined in RFC7208 (SPF).
There is a mail server, let's say mail.example.com. This server is used as relay for different domains.
In Section 2.4:
SPF verifiers MUST check the "MAIL FROM" identity if a "HELO" check either has not been performed or has not reached a definitive policy result by applying the check_host() function to the "MAIL FROM" identity as the <sender>.
I understand that, if the HELO has passed, there is no need to check MAIL FROM.
Similar in section 2.3:
Checking "HELO" promotes consistency of results and can reduce DNS resource usage. If a conclusive determination about the message can be made based on a check of "HELO", then the use of DNS resources to process the typically more complex "MAIL FROM" can be avoided.
Would this not lead to unchecked MAIL FROM identities?