Yes, though in a vast majority of cases, this is completely without intent.

But, it is also a serious attack vector, both for BTC and for noderunners.

I am glad I haven't run a node yet, TBH.