Proof of ownership of an email address is often used to prove ownership of an account on a third-party site.

Common examples are "forget password" workflows and Spotify/Slack's magic login link workflows.

If you own the transactional mail service through which all these flow, you are now responsible for the security of a large chunk of the Internet.