Why wouldn't STIR/SHAKEN fix it well enough? And isn't SHAKEN designed specifically to pass authentication over SS7?

It's fine if providers trust each other as long as they only do that after verifying that the other party is trustworthy, and quickly fix it if that turns out to be a wrong assumption.