None is more of a monitoring thing, which allows every email to flow through your domain and gives you a corresponding report. Quarantine is the most advisable policy because in addition to reporting, it also sends unauthenticated emails to the spam folder. Reject is the most strict policy as it strictly blocks all the emails that fail DMARC authentication.