This will be a game of cat and mouse, much like search and SEO spam, or cyber security.

My belief is that a real solution will require changes at the hardware level, to incorporate hardware level attestation that "cannot be hacked" at the software level.