But how would you enforce that, particularly against bad actors in countries that care less about enforcing laws and norms?

Spam calls are still a massive scourge even with Caller ID, SHAKE/STIR, and not for lack of trying.