Perhaps, similar to the edit requirement for autoconfirmed Wikipedia accounts, there would be a submission requirement.
With Wikipedia, your account can sit for as long as you want, but it won’t be autoconfirmed until there are at least 10 edits. Some vandals do get around this, but the vast majority don’t.
If front page and browse page visibility is suppressed, especially, it'd be trivial to make the account's first several uploads be some random stolen furry art. If you don't tag it and keep the title/description minimal, it's not going to show up in the search, either, so no one will see them to report them. At that point you're back to square one anyway.
I'm not trying to say it wouldn't be
nice to have some sort of protection against these things happening, but realistically it sadly would have to be a
lot more sophisticated than what works on Wikipedia. Not least because regular users can't undo someone else's FA submissions/comments/foo (nor should they be able to).
I also remember seeing posts about people hoarding FA accounts for a year and using them to flood the site. This was many years ago, but yea. Definitely illustrates the free time they have.
It may have been that long the time I was referring to - I don't remember the exact details, just that many of the accounts were at
least months old. It happened like... within a couple of days at most after me resigning, so I felt like shit (and very powerless/helpless) for the remaining staff having to deal with it. You can imagine what the tinfoil hatters thought. :V
It's not like it's very difficult to make an account and enter the details into a spreadsheet/database for a script/bot to use at a later date.