> Our rule of one person per subdomain will hopefully prevent this at scale

No it won’t. Spammers will just pay thousands of random people in poor countries to create their domain.