Another wonderful feature would be if there was some kind of process by which new activities could be send to an external process for scanning, as we do in most email pipelines when checking for spam.
Then suspicious activities could be CWed or put in some sort of moderation queue.