I think that is probably the point of the reply guy spam, to highlight a vulnerability so it gets addressed before less friendly actors use it.