QUIC, Google's experimental TCP replacement (at least for web traffic), does in fact prevent IP spoofing. It uses token authentication instead of a handshake like TCP does.

Spoofing discussion is actually the very first paragraph in its security document: https://docs.google.com/document/d/1g5nIXAIkN_Y-7XJW5K45IblH...