Posted July 11, 2017

Now we're going to be spammed with friend requests instead...
Anyway, if friend requests are to remain public, (assuming blocklists now work for requests too) their exploitability is significantly mitigated by the absence of spam payload (no text) and the notion of the request (people are less likely to permanently invite total strangers into their personal spaces than read a one-off message), and can be further decreased by only allowing a limited number of outstanding requests.
Post edited July 11, 2017 by Starmaker