I wouldn't go further than on-account creation security and number of threads within a short-ish time frame. We want to stop the spambots not annoy the legitimate users.

Unless otherwise specified, just an opinion or simple curiosity.