Thanks for reporting this, Christine. And thank-you to the Supervisors who blocked the spammer's account.
Unfortunately, there's no way to completely stop spammers without also stopping all legitimate interaction on the site.
We do limit the damage they can do. Users can't send more than 10 messages per day.