We follow an honor-based system. If a user abuses root access, we take their privileges away
Nice, but some users are not "honorable". And you make it super easy and quick to make accounts, no confirmation, just enter some email address. (not that i'm complaining about that part, i like easy signups... but it may open you to abuse).