I advise them that repeated incidents may result in half of their PersonMarks being removed. And, that they should link to their Profile and let the user choose to mark or not mark them, rather than the intentionally deceptive practice of posting the action URL.
There is a way to stop that practice... maybe I'll take a look at that tomorrow.