falsified telemetry is a ton of fun, especially since it's very difficult to solve.
found a bug related to this where you could get other users' accounts banned by sending fake telemetry that triggered abuse controls. they put the user ID as a field, instead of identifying it from the session.