As soon as a developer writes one line of code, it needs to be dealt with later. It either gets deleted or maintained.
In case it gets maintained,...
For further actions, you may consider blocking this person and/or reporting abuse
I think having a technical debt in any code base is common but the main concern is how you deal with it. As you mentioned once you start delaying that, it becomes more painful. So if you don't change it now, it might never happen later.