"I think the argument being made here is one of those "we can't make a perfect solution so no solution works", which is nonsense."

I have seen this type of "argument" countless times reading HN. I always wondered if I was the only one who noticed. Thank you for calling it out. It is indeed nonsense.

IMO, if "tech" companies cannot exercise due care, then they are at fault. There is no exception based on some idea that "our company must be large and serve millions of people in order to make money therefore we should not be held to the same standard as a smaller company." If necessary "scale" and nonexistent or grossly reduced customer service comes at a cost (e.g., fraud), then "tech" companies should have to pay that cost, not anyone else.

"The current situation with fraudulent EDRs illustrates the dangers of relying solely on email to process legal requests for highly sensitive subscriber data."

IMHO, the amount of important stuff today that depends on the presumed integrity of an email address is astounding.