Quick answer is no. What is too much? Obviously it's better to be in quarantine than in their inbox. What are the category levels set at? I'll assume blatant spam blocking is on? Is the email address a common name, which would be used very easily in direct harvest and dictionary attacks? Do they use their address for personal use as well?