Websites do not need SSL unless they allow users to upload or send personal data. SSL for every website is another scam run by SSL companies including Google. Ya Google became a certification authority when the added SSL to a ranking signal.
Exactly, this is the biggest headache in End-to-end encryption. For ex WhatsApp cannot prevent abuse of service. Even if you made a complaint of abuse of service, they cannot even check anything. Mainly spam filtering is not possible too. For WhatsApp this is an actually a marketing thing. They do not care about how bad it can be to the society. For a messaging app just, TLS should be enough. Luckily email is not End-to-end encrypted. Actually, it does not have to be. So that we have great spam detection. Why the hell anyone needs End-to-end encryption unless you are a terror*st. These days it is very much easier for scammers to make a living thanks to all the encryption going around including crypto. Everything becomes scammer friendly, and authorities can't do anything about anything anymore.