It doesn’t take criminal intent to bypass this, it’s more like Dennis the Menace noticing your spare key sticking out from underneath the doormat. (“Hey Mr. Wilson!”)
Emoticons are not substantial content. I know there are plenty of other ways to bypass 20 characters, but this one is pretty blatant.