If you're going to give an LLM a tool that lets it send emails, set it up so you can read the emails before releasing them.

It's not the LLM that spammed, it's the people who set up the LLM.