It's not to save the cost of a few bucks. Once people find out your site is easily susceptible to fraud, the majority of your traffic will be fraudulent. It only takes a few minutes to post a repeatable scam you found in a scamming discord for bragging rights, or to write a Python script to repeat the task over and over.