Googlebot has been able to index SPAs since 2019. They use a Headless Chrome instance and allow a number of seconds for things to render after each interaction.
Most CSR applications are behind a login wall anyway. Thinking of the core applications of services like WhatsApp, Discord, Gmail, Dropbox, Google Docs etc.
Bottom line, whether SSR really being “the future”: “it depends”.
A blog built as a SPA? Sucks. A blog built as a collection of documents? Awesome.