What makes you think no one is considering how to address spoofing? It seems likely to me that many of these companies have considered these cases in far more depth than you or I have.