Actually, you can be @-messaged or direct messaged even by people you don't follow, so spammers still have an in.
You can only DM people where you both follow each other.
Most of the people I follow on Twitter I found in this way. An echo chamber is not what I go to Twitter for.