You should be able to use PATINDEX('%@%.%', EMAIL) IS NOT NULL to make sure it matches a valid email pattern.

I don't think things have changed at all, there have always been people who don't pay as much attention as they should and there's always been code that gets pushed...