@b0rk Consider the reasons that IPv4 (and IPv6 too) have no functional security layer (authenticated headers, encrypted payloads, etc.) on the public Internet. IPsec works only on virtual private networks, despite the clear public interest in the welfare to be provided by a public Internet with a working security layer. There are discoverable reasons for it, and none of them are in your “mostly legitimate” categories.