pull down to refresh
good point, seems fairly easy to abuse.
account characteristics gating + request limiting + global rate limiting + time limiting helps with this. Think like a credit card company.
don't credit card companies require way more KYC though?
You have "KYC" because you offer it to SN accounts only.
good point, seems fairly easy to abuse.