From my experience the tailwatcher and (not) suprisingly related HAM communities are magical in their ability to just trust their community and rarely get burned.

Only 4 active connections allowed per site on a popular HAM webring? Never hogged by bots.

Site that allows minimally authenticated posting of aircraft ACARS messages? Never seen it hijacked for ads.

Physics-limited space for nearly untracable HF radio transmissions that can span half the US? Handfull of trolls that voluntarily relegate themselves to the 'troll freqs'.

It's no surprise the site allows unauthenticated JSON; in the rest of the hobby the FCC makes most types of security outright illegal.