Do this if you haven't yet

[holly_evolving]

How to Disable RealID:

http://greedygoblin.blogspot.com/2010/07/would-you-stop-whining-about-realid.html

I've never given parental controls even a modicum of thought before, and never would have figured this out on my own.

Sooner or later, in every "friends of friends" chain, someone is a theiving douche. So even if I'm completely wrong about that Report Spam exploit, this system is ultimately exploitable.