I just emailed Bjorn about periodically purging users that aren't in the WikiUsers group and are older than a certain age. This would at least reduce the number of spam accounts. Maybe some restrictions on username length would also be wise, seeing as all the spam accounts have unreasonably long names?