Why do consumers get prosecuted for circumventing DRM, even if just to claim back their ownership of content and devices they bought, but companies get away with actually malicious circumvention (spoofing) on a much wider scale?

Also, technically speaking, how can big telcos make sure they route a call to the right phone, and also claim to be helpless against spoofing?