A missing MTA-STS policy won’t affect incoming mail compared to the previous version of Mail-in-a-Box but indicates that the new MTA-STS record (which adds security for incoming mail) isn’t present. This might be a normal DNS propagation issue. Or maybe after an upgrade we don’t immediately publish updated DNS records. Can you report back tomorrow if the error is still there?