Because there are some good reasons for spoofing Caller ID (e.g. providing a master extension for a call made from a company) and, historically, it was hard/expensive to do. That difficulty pretty much went away with VoIP and other technology changes.