A theory that's been floating around is that they might intentionally not have implemented anti-bot measures, in order to pump up user numbers for their IPO.