[meowface]

Would it have made a difference if they made the "To:" a non-existent address? Would a bounce also prevent delivery to BCC recipients?

[AstralStorm]

Technically, they have to defeat greylisting and server validity checks anyway to get mails accepted to most modern mail servers.