There are workarounds to both 1 and 2. A company or person with a legit message can vet the message without the need to whitelist the sender address.

If anyone powerful is serious about trying a new twist email me.