Currently, there is no validation procedure for who can post, or how much they can post. Ideally, an admin should be notified when a message is posted, and only allow the message to go live after admin approval.
Not immediately important, but messages should expire after sitting in a collection for a while.