Malicious actors can easily change domains, legitimate businesses can't.

So this is a harsh punishment to all good people, and very weak punishment to all scammers and spammers.

Especially relevant when you consider the organic search traffic legitimate webmasters may rely upon, vs. the email campaigns or even paid traffic bad actors can quickly spin up.