So what about this attack vector: An attacking user creates one hundred accounts. These accounts all follow each other giving them a neutral UA. Then all of these accounts follow the attacking user to transfer their UA to the attacking user.
Wouldn't this be a way to undermine the UA system?
I like the idea behind UA, I'm just worried it won't work.
Answered in the top comment!