Eh, whackamole enforcement usually cuts mustard with this kind of stuff.
Like yeah someone's gonna do it anyways just because, but then all it takes is enough people raising an alarm to bring it down, and as a side effect, remove more shitass developers from the market.
You end up with an equilibrium where not every example is getting the hammers of justice, but enough examples are that the average consumer still feels the benefit of a noticeably less toxic internet.