The obvious loopholes are the "who's online" and "last logged in members" sections on the main page, which make it very easy for a spammer to harvest usernames without having to read posts.
Yes. Strictly it's Phra Ram IV. (Phra is an honorific denoting royalty). But in casual Thai speech, Rs tends to turn into L or N or disappear altogether.