Surely the right answer would have been to enable users to report spam invites, and to kill spam-sending domains. Kinda like what is already done for email. Could probably repurpose a lot of the existing infrastructure.