I’m currently not deleting spam accounts since I’m hoping to feed them to SpamBrainz once SpamBrainz actually materialises. This means that currently I mark spam with "Editing/voting disabled", "Edit notes disabled", and "Untrusted" – the two former being dangerously close to "Banner message editor" (which probably deserves its own ticket, actually), so I’m wary of accidentally one day giving that permission to a spammer.

Additionally, this approach means that the profile will still be viewable by users and search engines and they get to still use the account to log into forums, LB, CB, BB, or other sites using MB authentication.

This flag would ideally freeze a marked account so that only account admins are able to see the profile (I don’t know if we should return a 404 and pretend like it doesn’t exist, or a 403 and acknowledge it exists and just isn’t available currently; possibly greying out potential edit note links?) and that the account wouldn’t be able to log in (possibly giving an error message that their profile has been flagged as spam and to mail support@ if they think this is a mistake?).