They could. The protocol also supports IP spoofing, so doxing could also be a thing.

For individuals, it is a time consuming and costly legal process, whether justified or not. For the law firm, it costs a few cents per letter, but they get a few hundred (or more) euros when some sucker pays.