You can also get the profile pic URL and add it to hidden words. Just as another workaround.

But yeah all it would take would be to have a spammer with no name and no profile pic to get around this. But works for now which is good:)