We more-so need Old Web with actual consequences for bad actors. You know, the days when you could email an ISP's abuse mailbox with evidence of someone running portscans and they'd get at least told to clean up shop or else, and the or else went as far as getting their contract cancelled entirely.

These days it seems like abuse@ is routed straight to /dev/null, and that's not even addressing enemy nation states that willingly shield and host bad actors.