Is it okay for your business model to have possible exploits?

For example, is it okay for your referral program to be possibly exploited by people making fake accounts or should you explicitly try to remedy any possible exploits?