If browsers used vision-based login spoof detection we wouldn't have a phishing problem. At this point I'm just assuming they just don't want to be held liable

If browsers used vision-based login spoof detection we wouldn't have a phishing problem. At this point I'm just assuming they just don't want to be held liable for false-negatives so they don't even bother trying.