Is it really whack a mole if within minutes of federating, a simple automated tool could add them to the list with no human involvement?

I wouldn’t say so, at that point it’s a trivial technical challenge