Thanks for the write up, that makes sense.

I would of thought these 'spammers' would of given up because of verification, but it seems to continue despite many of accounts not being verified yet, perhaps they think they can verify later (which makes me think a TTL on verification emails is important) or that was an oversight completely on their end.