That could be easily addressed in at least 3 ways. Only apply references to approved nodes, only allow X references per node, default to not sending a message when a new reference is created. I think some combination of those would stop most attempts to use this as spam.