If someone uses the system maliciously, of course that should be grounds to cut any further invite privileges. Maybe some limit that no good-faith, actual user will ever hit as a precaution.

And yea, I'm not against implementing it on the profile really. It's probably a more healthy stat to track than most