> What would stop a bad actor from putting in someone else's email on a whole bunch of sites with this kind of form to spam them?

What would stop a bad actor from doing the same on the register, forgot password or newsletter forms?