Presumably one could now punish this behaviour by spamming the API with a firehose of fake data?