It happened. I just received the first spam e-mail to an address that's
only listed in my Gopher hole. So it took it a little more than 10 years
for the spammers to find it.
I bet they didn't find the address through Gopher itself, but one of the
various HTTP proxies out there ...