OpenRouter should be penalising or banning for this.

They have an "exacto" category with providers they supposedly verified

That’s only for tool use.

This is my biggest complaint about OpenRouter and I'm a fan. Might be pretty tough at scale?

Would that align with their VC-backed incentives?

If your users can't trust your product then I'd say that'd be a pretty strong incentive?