Well, they could, but then they’re parsing millions of your SMS messages every time they’re sent for “malicious data” (see: what you say)

e: barring privacy concerns, this is a pretty resource intensive process for a protocol that carriers really want to care less about

So it’s kind of a double-edged sword running legacy insecure messaging protocols, eh?