Solution 1 wouldn't do a thing, really - phishing scams these days already ask for your authenticator, so they would just change to also ask for the code emailed. No change there at all.
Solution 2 is already in progress. Jagex announced a few months that they were accelerating PMod recruitment in Old School RS on one of their livestreams. Remember though that PMods are players too - they aren't obligated to go out of their way to hunt down spammers and other players who might be rulebreaking, so while I'm sure most will be happy to clean up problem areas if they happen to come across them, reports from everyone else of rulebreaking behavior does help Jagex clean up the game too.