Potentially unpopular take: Attribution is a distraction.Most orgs are not mature enough for attribution to actually differentiate response (just like honeypots).Layer 8 is obsessed with attribution -- perhaps to make things more dramatic / urgent? -- so it persists.So such things get chased, to the detriment of the basics.