I keep saying: none of this will end until we get a clean, cryptographically secure, government-backed way to ID who is sending us something, and it becomes an expectation to use it all the time for anything important. Which is why I have conspiracy theories about the conspiracy theories about government ID.