That’s neither here nor there.

This a very specific situation where someone comes to my website/company, takes an action they believe is safe, and gets a bunch of spam. That would absolutely be my responsibility - it’s where the buck stops.

It’s similar to how I follow my Congressional Representative but they also added me on various donor lists now.

Just because people do it doesn’t mean it’s not shitty.