Facebook should add a privacy setting that allows you to disable @mentions completely, or limit them to people you have added as a friend. I would not be surprised if this is already a feature.