Netflix deliberately doesn't verify sign-up email addresses. They are to blame. https://jameshfisher.com/2018/04/07/the-dots-do-matter-how-to-scam-a-gmail-user.html