How hard can it be to have an automated system flag accounts with suspicious uptime and have a person watch them for 30seconds.

Seen the same accounts still running since Stormblood.