Public OpenPGP key servers synchronize their public keys with each other and as far as I know anyone could set up their own keyserver and synchronize it with other keyservers.
This made me wonder if that results in spammers potentially doing just that to gain valid email addresses to send spam mail to.
Is this a valid concern or would the effort to set this up be a reason why spammers wouldn't do it?