Yes, and if you don't operate your instance with a whitelist approach the "bad people" definitely have more capability to attack you and your users than on a single centralized service where various metrics and heuristics can be used to universally detect bad actors and bad behavior and silence them.

Lots of people are going to learn this the hard way as this network grows.