Yeah, they need to lock it down a bit more where you have to accept a follow. It’s too easy for bots/others to see the followers of others and send follow requests.