Great complex secure service https://privatoria.net/ for online paranoids)
Yes, they could. But you can block a user who spams.