That's your misconception here - thinking it's one of billions. You have lived with spam and phishing emails your whole life. It's clearly not one bad actor alone, but by the same token it's not everyone in existence. Only what used to be one person running a scam is now one person running 10,000 automations to run a scam. Now make the automations more effective by 10%.

And that's the problem you don't even seem to recognise.