we need to implement some level of spam prevention, but since we don’t want to censor or ban accounts authentic accounts, we need to make it easier on the receiver’s end to filter out potential noise. (I say “authentic accounts” because we need high-level bot prevention somehow)

Potential threats

• Backlink spamming - similar to tagging a bunch of users in replies on twitter

see also:

Less risk of spam

human-readable UUID - blocked accounts? spam risk score? internal spam risk score?

Block user