Same can be said about free relays. Relays cost in the hundreds to run and host data for potentially many bad actors , and do so in good faith.
Relays should all whitelist users to prevent bad actors from creeping in.
The same argument can be used for users.