Right, aside from friction for users, spammers will attempt to find ways around any system you implement. They are malicious actors. I don't think protecting a system against malicious actors is trivial.