Most people historically would consider a video call with the person to be sufficiently authenticated. Yeah, that has changed obviously, but it has changed like today.
No, not today. This has already happened a few times. And even before it happened people warned about this predictable use of the technology. There has been enough time to update policies. Even $employer already did, and I consider their security policies so-so.