Comment by righthand

There’s nothing to fall through, email fits it’s exact purpose. Email is supposed to have 0 sending/receiving friction. So one idea to fix it is to only accept email from addresses you’ve allowed. No one wants to constantly update their address book though, they just want the email (forgetting to remove the marketing email allowance after you receive the account verification link). So then there’s nothing to fix.

The abuse is by design.