Pretty wild that there isn't a countermeasure in place by default.

Has nobody at github/microsoft experienced a Reply All email chain yet?