If I had to guess, requiring that each email address be tied to an individual person would allow NBox to stay off "temporary email address" blacklists. It's a privacy service essentially, not an anonymity service. Same reason why credit card masking services are legal, but Visa/MC/etc wouldn't allow a mass-shared CC number.