I hadn’t heard of that one, a kind of social engineering attack. Definitely something to keep in mind!

as a result I don’t add randos

This is generally my attitude, and it sucks really that ignoring random friend requests is usually the sensible thing to do. Anyway so far this person does seem to be genuine and hasn’t tried to get me to add a load of their friends or anything like that.