The server I saw probably did not have auth on. Might consider making auth on by default when creating new MP public game too

If a griefer join with a name beginning with many spaces at the beginning or in the middle, overly long, or other hard to type characters, it's nearly impossible to kick him.

Furthermore, in the specific case I saw, the console chat only displayed "." as character name in kill message when ...