Blocking disposable email domains at signup increasingly punishes privacy-conscious users while doing little against motivated abusers.