I would argue that the legality of this doesn't matter; there's a huge technical problem in that there's no authenticity guarantees at all when it comes to caller ID and the entire feature is badly designed and has always been open to abuse.
SHAKEN/STIR is the (technical) answer to this, though I'll be interested to see to what extent it's adopted.
SHAKEN/STIR is the (technical) answer to this, though I'll be interested to see to what extent it's adopted.