I think "SHAKEN/STIR" is supposed to fix this long term. I'm not sure why it's taking so long, but I believe phones will already indicate if the phone call has a verified caller id. Probably next step is to just block any non-verified caller. I'm assuming there's just a lot of migration work to happen.
https://www.fcc.gov/call-authentication