At this point, does there exist a way to stay secure agreed upon by the security community. Fundamentally phishing is social engineering. Humans are emotional and irrational especially in social situations. Is everything not just a matter of making sure I am a couple standard deviations more secure than most other people?

If your data gets hacked/leaked it would also be easy to attribute things more clearly. As internet data gets tied to real world ID, data leaks are going to be more easily exploited...

They realized that dead internet theory poses an existential threat to their business. If more and more watch time is from bots, why would advertisers pay?