you can make sure kinds 1064 and 1065 are disallowed, to prevent nip95s
Could they coopt a different kind's content field?
sure, anyone can use a kind if it's allowed in there by the ACLs.. but it's less likely. This is why I'm adding some metrics into the trex. Already showing kinds (last 30 days) and then a count of last 24hr. This will come with charts #soon.
You FOMOing into Grafana or Kibana or...?
the stats are in influxdb, which i will render using chart.js or etc. thats where those kind counts are already pulling from.