What provisions are in place to prevent someone from opening an account, use it to spam and then putting your IP block on a shitlist with large email providers like Gmail?
Rate limits, feedback loops, and we scan outgoing mail through SpamAssassin. In practice we've only had password breaches causing spam, nothing intentional.