They technically are. How about we just stop stealing from their budgets?

This is exactly what I do, and what I've been doing for two years now per recommendation from another friend. I can't suggest this strongly enough.

If it ever gets violated, add that address to an account with zero or small size limit and let it bounce back to them.

I get less than a half-dozen pieces of spam per month. Most are to the address I put in the whois information (whois@domain), followed closely by sales@domain, info@domain and webmaster@domain, none of which were intended to be valid addresses anyway.