Let's say I can trigger a mail event in a few scenario's without any a limit on that trigger. For example at:
- Password reset
- Newsletter subscription
The "registration" and "newsletter subscription" can be done on all email addresses and the "password reset" trigger likely only on existing accounts.
Is there any other risk than just misusing this mail trigger for sending annoying emails to email addresses, that didn't ask for it?
I was thinking in the direction of resource exhaustion because the mail-trigger might take more resources, so calling it more often on a larger scale takes resources on both sides, client and server-side.