Yeah. I was thinking both of those things when I wrote the comment but did not mention either because I wanted to be positive. :) You can say them, though, because you're right in the thick of it. I can't believe they're trying to use your username like that. Just insane.
I think what you and many others are doing is awesome, with the spam and particularly with the phishing. I just hope that it all ends up being time well spent in the end because that will mean Steemit et al will be a safer place. As I come across things, I hope to report them. I'm generally a step behind (someone's already reported and flagged), so it's obvious that the work is happening and at the very least raising awareness. That might be what actually turns the tide—people just being aware and not falling into the little traps.