People seem to forget that, 15-20 years ago, 95% of email was spam. It’s gone down since then, but only because email isn’t that important of a communication platform nowadays.

Bad actors attack with the tools they’ve got. If it’s not protected, it’s exploitable until it is.