It's the same with spammers. If you are a public email provider, the spammers create accounts and spam them before unleashing their spam. Since they have access

It's the same with spammers. If you are a public email provider, the spammers create accounts and spam them before unleashing their spam. Since they have access to both sides of the wall, they can keep trying till they are successful. Rinse, lather, repeat.