Looks prone to abuse. Does the BTC address need to be funded? I tried an unfunded address and it got accepted. If yes, at which blockheight?

What is preventing someone from creating 1000 addresses, thus claiming 5000 BTR? Or if there is need to have the addresses funded, spam them with a small amount?