Considering the landscape of spam, phishing, and malicious actors poking around what's your alternative solution to how firewall rules (and category lists gener

Considering the landscape of spam, phishing, and malicious actors poking around what's your alternative solution to how firewall rules (and category lists generated and maintained by companies like Palo Alto) are currently applied? The IT side of things has limited tools (and budget) with which to control and secure the internal environment. IMO there's also a failure of government here to both ensure an open internet and to come down on people abusing the system. A related example might be the phone spam calls everyone in the US gets - it's an administrative, legal, and regulatory problem, not a technical one. My context may be a bit skewed though since I'm a sysadmin turned cybersecurity and I've seen the large numbers of people clicking on the absolute stupidest things. Given the "average" computer use that IT has to deal with I'm much more sympathetic to their plight.