Can you clarify regarding no way to kick it back to them? My understanding was that they operate typical feedback loops per RFC 6449 (though I haven't personally verified this).
Try self-hosted mail. The section on reporting spam from Yahoo conspicuously omits such options as submitting full headers to abuse or postmaster. Doing so in past (mutt, full headers) generates a "you're holding it wrong" messagee.
This goes back years, I've not tried recently, status may have changed. But again, the long, long term experience has been pretty sour.
What part of "mail to abuse@ or postmaster@ fails" don't you understand?
The web-form workflow breaks in many ways: console tools (which I use for email), mobile, and more.
The fact that I can simply "bounce" the whole message at Yahoo's spamtraps, if they had such a thing, and they can sort the message's legitimacy and structure themselves, but they don't allow this, speaks volumes.
And again, this shit for a decade or more.
Now, if Yahoo wanted to creat CLI tools to incorporate into mailflows for those of us who know what we're doing to slot into their systems, great.
But ultimately, their problems aren't mine, I've washed my hands.
They also host a spam FAQ which has a link to a form to submit spam reports: https://help.yahoo.com/kb/SLN3402.html