I really think they need to of earn't 250 merit, but thats just my thought on it
Again, that would help for now, but just push the problem further down the line as more and more members (and more and more sold/hacked accounts) will eventually reach that milestone.
Perhaps the requirement should be top 200 (LOL) or at least top 50% of merit earners or smth like that. But there are other barriers too. I bet theymos will review it next month when no doubt some abuse attempts will be happening and will adjust it if needed.