Even if they make it illegal, it won't stop bad actors especially from foreign countries to abuse stuff like this. It's better to build better systems that fix this issue instead of relying on government laws.

You could compare it to the concept of security by obscurity which is obviously bad.

It's already illegal in Europe: https://news.ycombinator.com/item?id=44670345