The problem with this approach is that it allows malicious actors to trigger sending an email to addresses that have never interacted with your instance, or that do not exist.
This could lead to much higher numbers of emails sent, potentially causing high monetary cost. It could also lead to a large increase in users reporting spam and a higher bounce rate, potentially causing operators like Gmail blacklisting emails from you.