I give anyone who wants to poison my addresses permission to do so. It’s free bitcoin 🤷♂️
I agree that attackers will likely target addresses with multiple transactions going in and out to maximize their chances of success. I believe it is good practice to use a freshly generated HD address to receive any bitcoin and never reuse addresses.
Personally, I think address poisoning is a creative way to steal bitcoin, but I don’t think it has a high enough success rate for it to be very popular in the long run. The cost of the bait is worth more than the catch.