This is absolutely the case. I think the original comment missed the assumption that the spammer already has the email addresses they spammed.