Probably unrelated, domain spoofing is common, but miss-configured mail servers will accept those emails and process auto replies. They can also abuse input forms to try and send out emails, but that typically does not have much control over content.

If you are getting more emails than you can deal with, than can be used to try and mask other emails by burying them in a large email volume. In that case you should be looking for emails from important accounts you do own (eg banking.)

No mention of ms edit? I feel this won’t last.

That’s watts multiplied by time, aka energy.

It’s less of a main, and more of a “don’t do this if being imported.” You can just throw code without that block and it will run.