The same can be said for all sorts of activities, from the illegal and unethical to the mundane.
Although, to be fair, you're right. Which is why I actively make it my goal to make doing cold sales outreach more costly to the companies doing it than if they had done nothing at all. A BDR cold emailing me is a pretty good way to make sure your software does not get considered by my organization, and I'm very likely going to cost their privacy/compliance team more time than they spent contacting me unwantedly in the first place.