Yeah, I've had a bunch of recruitment agencies and similar companies try to create groups - I'm mostly managing to flag those and keep them down with a combination of auto/manual moderation.
Regarding the messages - that's one reason I've opted not to have user-to-user DMs. You can DM organisers of a group, but all messaging outside that is public (on activities and groups for example).