While the address in the Return-Path often matches other originator addresses in the mail header such as the "header-from", this is not necessarily the case, and SPF does not prevent forgery of these other addresses such as "sender" header.