I did understand point 1: but this type of block would illustrate that a primary concern is the ability to abuse my personal e-mail address. Assuming a company doesn't have that intent, I don't think they should send that signal.

Point 2 regarding abuse in the other direction is more interesting, and a fair point, thanks.