@pedromj seems to do everything any Instance Admin would need to do to protect against this.

And Admins are being vigilant against it popping up from other domains or instances.