And what are they going to do, spam people with Yahoo's auto reply? It's not like it's an open relay. Possible it could be used for a DOS attack, but not for spamming.
Spoof the return headers and send a million or two mails to abuse@yahoo just for fun....if the responder also includes the message then the spam is done as a million autoreplies are sent out to people who never sent them..