This is true, but it's much less of a concern because:

1. You get way less faxes than emails.

2. Faxes can't steal credentials.

3. You should be auditing expenses anyway.