These lists are available to every script kiddie in the world now, maybe people will stop giving shitcoin airdrops and every sketchy exchange under the sun their kyc when even the "Institutionally accepted" ones don't care enough to encrypt customer data?
With that being said these script kiddies are truly stupid and I would not doubt he has a script written by someone else that will sweep all the generated addresses into a central address or exchange address that is connected. Now these tards will use code like >0 rather than use a algorithm to determine what fund get swept where because well they are just that fucking stupid. So in the off chance this address is in a automated script sweep then dusting it is a good thing.
Also I would be willing to bet there are algos out there that look back a number of transactions and check for dusted addresses and that if there is one then the alarm level on that address is increased for human attention. How do I guess this? Well I've written alot of algo's over the years and I would add that with a variable for depth.
Anything the kiddie can learn from a response is already in the email, this is not like a spam email that if you reply they know the email is active, this is a targeted email with all relevant data already displayed and by dusting the address it does not either confirm nor deny any of that data. but it may actually put a bit of fear into the kiddie as most of them know dusted addresses are tagged for a reason.
So in effect it may actually help make the kiddie give up on this one and focus on the easier targets in the future. Even if the kiddie sees this thread they will know this is not the crowd to be fucking with.