Just assume that anyone called Badspot asking for your bl key to verify that it is real is not Badspot. I might add a client-side filter to make Badspot and Badspot_RTB users invisible to everyone else.
Also the name reservations only prevent you from gaining any auto-admin statuses that the registered name has - if the name owner comes on he can forcibly change your name so he can use it again.