This is technically true but practically irrelevant. A Spamhaus listing is the Internet equivalent of a sanctions designation and the process to get removed is equally as Kafkaesque as OFAC's. Not to mention the fact that addresses in the [DROP list](https://www.spamhaus.org/drop/drop.txt) effectively can't even connect to the broader Internet because every important tier1/tier2 uses these lists and drops all their packets.
Spamhaus publishes information on network space which originates large volumes of spam.
Mail system operators use that information as they see fit.
<https://www.spamhaus.org/sbl/>