Remove perms that you think are not needed for your use case.
We use OCR and hash blacklists to identify the scam images.
Deletions are logged by the bot.
The bot will DM the hacked user with info on how they were hacked.