Hence the emergence of such legislation as: https://en.wikipedia.org/wiki/CAN-SPAM_Act_of_2003

Of which the efficacy is certainly arguable, since a truly reputable firm might seek to provide such a mechanism in an easy-to-use manner. Whereas a shady operation would, and do, ignore the directive anyhow.