Even if they tried to make it so there needs to be a record of the accepting account saying “this is ok”, this would be easily spoofable

This isn't necessarily true; it could be done using cryptographic signatures just like sending is, which would preclude the possibility of spoofing.