Sorry I misframed it. I mean that since there's no need to reveal phone numbers, there could be an opportunity for spammers to increase spam by creating many accounts, and Signal should preemptively find ways where such spams could be reduced. However, I realized after posting that the article says we still need to sign up to signal with a phone number. However, there's still the risk of impersonation (by writing someones username with tiny changes) and people trying to add vulnerable users by username (which they might be using on other platforms) instead of phone number.
Probably possible yeah, but if the account gets flagged after users reporting it, they'll need to get a new number afterwards, which isn't that easy (at least where I live).