The problem is not that it's difficult to run an SMTP server - botnets run millions of them. The problem is that telling a legitimate one from one that sends spam is an arms race.