The solution to Metamask phishing is very simple.
It's generative art.
When a user sets the extension up, they choose from a few generated themes (accent colors, shapes, patterns) which stay unique for that user. A phishing window won't be able to replicate those.