Thanks @alerque, yes, we need to be more careful. In the past, we used the password protected feature to have posts reviewed before they went public, but that’s probably no longer appropriate given people subscribing via RSS.
Scale breaks everything.