That's the thing -- it's not an "easy" loophole. Like any arms race, every website is in competition with its foils -- scammers, phishers, spammers and their ilk.

I disagree that it's not possible to stay ahead of them. That's our job.