I can confirm that even with the -proxy parameter disabled, users can still connect via proxy (at least with Windows). FindCoin has this disabled, but I was able to run 5 separate wallets via HTTPS proxies and received coins for each one. Until this can be addressed and fixed, I have to agree that proof of faucet coins need some type of additional security to prevent abuse.