>Why are such technologies still possible, even after we've learned lessons from email and other legacy tech over the past several decades?

The alternative seems far more disappointing from an engineering and architecture perspective to me - not bothering to implement any features because of fears that they may be abused.