Yes, but if he can do it anyone can do it, right? Isn't this more just pointing out a flaw than spamming?

I agree with you that every client can handle this stuff however they want, but manually adding non-bots to a list also seems kinda scammy, no?