I worked in telecom for a couple of years up until recently. There’s actually a growing body of self-regulation going on within the industry. Most notably, any business sending text messages has to apply for a “license” to do so, with some pretty strict consent requirements. Violating those requirements comes with heavy penalties, mostly enforced by downstream carriers. If you’re curious, 10DLC/A2P are the terms to Google for.