Dean Robb writes:
The misuse aspect has come about because spammers (primarily) have bots
that will harvest all the addresses in WhoIs and send them their drivel.
Contact handles are predictable. All you need to do in a bot is try all
the permutations of 2 or 3 letters, with or without -ORG at the end, and
increment numbers until nothing is found. That will get you perhaps 99%
of the handles.
Handles should instead be generated in an unpredictable way, such as MD5.