For a generic non personalized spam, IMHO it would be too expensive to generate and track millions of wallets. They could have placed a tracking pixel for much less (they didn’t, the email is just plain text)

If then it’s some targeted campaign, then yes, a dedicated BTC address makes sense as you said