I dished out about 30 flags on phishing comments, but hardly made a dent to the piss-ant's rep.

One way to stop this, or make it more difficult would be for Bittrex etc... to tie your Steem wallet to your wallet on the exchange, and for 2FA on any transfer to an exchange wallet like @bittrex or @blocktrades. If there is a many-to-one pattern between wallet, this should raise a red flag and the exchange account frozen and put under review. I'm sure they could work something out to add some better level of protection.

Obviously the first prize is to be alert and pay attention to what you're clicking on.