Looks like this is fully anonymous and that your auth doesn’t apply on this page (when I visit it with an active session, it doesn’t show as such). I think if you require people to be logged in you’ll already decrease malicious traffic by a lot. Love the idea btw!