This kind of thing is a seriously hard thing to police in a fair and reasonable way. Real spammers have become very sophisticated, and separating them from good users is very very difficult. Many bots steal real human accounts for their nefarious behaviour. Human review of accounts doesn't help much either - you simply can't allow a human to delve through a users mail/photos to see if they are a bot or not.