Anyone who has run a service that allows user content of any type knows that the miscreants are endlessly creative and you can expend infinite resources but some will slip through.

I still see the daily spam and phishing email in my Gmail, despite the tens/hundreds of millions Google has invested in filtering.