If I'm understanding it correctly this seems to allow for the possibility of brute force spam account production?