However, I don't know what they can do here. They set up the system where the users respond to blue checkmarks positively. Adding another layer of blue checkmark is confusing and silly, but having it be gamed is also not good.
The (verified) account bio is "Official Account of the Directorate of School Principals, School Supervisors, and Tendik, Directorate General of GTK, Ministry of Education and Culture, Research and Technology" (translated from Indonesian). It's probably a legit account that got compromised; tweets from a few days ago are all fine (and about Indonesian politics and the like).
So basically, the problem isn't really with the blue checkmark as such; it's useful to verify this is an official government account rather than some random guy; the problem is this account got compromised somehow.
For the people reporting these things on twitter, there is also "report an account" which is less clicks.
Like maybe if someone's account suddenly has 5+ mutual connections reporting it as "maliciously taken over" you can shadowban it and not have it continue to spam everyone on their friend list? Like it's not that hard.