> then they should send an informative email to every user, say once every week about spamming, phising, passwords, etc.
Which would be annoying. Users would either block it or ignore it.
> Of course, it should be easy opt out.
If it was easy enough, everyone would, rendering it useless.