Rely solely on DKIM, remove spf.protection.outlook.com from SPF record?

That is a very interesting question. I would be hesitant to go down that path because, as you say, you don't really have much visibility on how recipient email systems will treat these messages. If you have a "test" mail domain in regular use, it might be worth trying it.