My guess is that Lemmy is at the weird intersection where it's popular enough that people get satisfaction from "breaking" it while also not being mature enough to have robust ways to defend against it. The project did get forced into the limelight after all and it's fantastic that everything has scaled as well as it has so far