Email is push. Twitter is pull.

Of course you can set your email server to reject every single email that you do not have in a whitelist, but that’s not a feature of the protocol. Plus it’s something you need to manually do (because most people don’t want -or expect that- from email).

People expect Twitter (or similar apps/protocols) to not show them messages other than from people that are explicitly followed.