I don't think it can be used to spam people, but if enough people use it for signups to services ("we sent you a confirmation email") the domain risks being add

I don't think it can be used to spam people, but if enough people use it for signups to services ("we sent you a confirmation email") the domain risks being added to a burner/disposable/proxy/anonymous/privacy domain list and become less trustworthy.