That's correct. Going with the recommendation above, perform an MX lookup on your .onmicrosoft.com domain. For example, for contoso.onmicrosoft.com this returns contoso.mail.protection.outlook.com. Now, for all of the domains that are added to this example tenant, contoso.mail.protection.outlook.com can be set for each of their MX records.