They are allowed to send private messages.
Example simon235, I think he's a scammer. Offering on all my items, insane prices.
He sends me pms, but I cannot pm him back as his status is still "validating".
Would be a good thing to disable private messages for those people who r still "validating" their account.