According to the https://learn.microsoft.com/en-us/purview/how-smtp-dane-works:
use of SMTP DANE requires tenants to have a Microsoft 365 E5 subscription.
Hopefully the documentation is still a work in progress, as I find it difficult to understand the justification for putting SMTP DANE behind the E5 paywall. I would have thought it made more sense to move towards good defaults for all your customers, and enable DANE for everybody who is onboarded to mx.microsoft, whether they are new tenants or tenants migrating from mail.protection.outlook.com.
(Edit. The documentation has been updated to remove references to E5 license requirement, so hopefully it was an error. It would be nice to get confirmation from The_Exchange_Team IanMcDonald that there are no special license requirements)