Hello there,
I have discovered a problem with account creation. there is no bot protection to sign up. this can be used in a script that can send many GET Requests to create accounts. with gmail and outlook. say the email is boxxy@outlook.com.au you can do boxxy+randomtext@outlook.com.au and it will send to the same mailbox.
I have made a very basic python script to spam an inbox.