Spammers take advantage of this fact, and frequently outsource parts of their operations to countries where spamming will not get them into legal trouble.
However, that policy enables spammers, direct marketers, identity thieves, or other attackers to use the directory for personal information about those people.