Its not unverified. It's trust based on the email domain and hopefully DMARC etc. That's an ok trust model, it proves the request is coming from a government agency. In my opinion the issue is that police forces are not securing their email properly, which is a big issue, but not necessarily the tech companies fault. Domain ownership is the trust model of the internet after all.