We eventually got plugged into the InfoSec community, though, and were able to build systems to detect this and both take action (blocking accounts, etc) and also collect information to help security researchers.
I take my users' security and privacy seriously, but if you're doing malfeasance, it all goes out the window - you're not a user anymore, you're an abuser. And don't worry, we put that in our ToS too.
3/?