It's the expectation of the user that this is hacking. Inserting the HTML into a non-Intro user's email wouldn't make sense. But sense the user is expecting that data, and for it to be validated, spoofing it becomes much more valuable.