There's a reason they're so cheap. There are a lot of drawbacks to the E4406A when used as a general-purpose spectrum analyzer. Limited span width, no front-end RF filtering, lots of controls and features are disabled, and deliberately-crippled usability for the ones that are provided -- e.g., the knob tunes at the same rate regardless of span.
But they're still very nice instruments. If your application involves characterizing a known signal source (as opposed to hunting spurious signals, doing EMC precompliance, or otherwise looking at sources with unknown characteristics), they're very capable. They're especially well-suited for use in automated test applications.